A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions <…
Priority LOW 30CWE-1325Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · Low
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.5), SIMATIC Energy Manager PRO (All versions < V7.5), SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions), SIMIT V10 (All versions), SIMIT V11 (All versions < V11.1). Unified Automation .NET based OPC UA Server SDK before 3.2.2 used in Siemens products are affected by a similar vulnerability as documented in CVE-2023-27321 for the OPC Foundation UA .NET Standard implementation. A successful attack may lead to high load situation and memory exhaustion, and may block the server.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00465 40th percentileScored 2026-11-07
Fix Fixed SIMATIC Energy Manager Basic (Siemens): V7.5SIMATIC Energy Manager PRO (Siemens): V7.5+1 more product
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | SIMATIC Energy Manager Basic | before V7.5 | V7.5 | Patch available | CNA |
| Siemens | SIMATIC Energy Manager PRO | before V7.5 | V7.5 | Patch available | CNA |
| Siemens | SIMATIC IPC DiagBase | all versions | — | No fix listed | CNA |
| Siemens | SIMATIC IPC DiagMonitor | all versions | — | No fix listed | CNA |
| Siemens | SIMIT V10 | all versions | — | No fix listed | CNA |
| Siemens | SIMIT V11 | before V11.1 | V11.1 | Patch available | CNA |
- SIMATIC Energy Manager Basic VendorSiemens Affected before V7.5 Fixed in V7.5 Patch available CNA
- SIMATIC Energy Manager PRO VendorSiemens Affected before V7.5 Fixed in V7.5 Patch available CNA
- SIMATIC IPC DiagBase VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SIMATIC IPC DiagMonitor VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SIMIT V10 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SIMIT V11 VendorSiemens Affected before V11.1 Fixed in V11.1 Patch available CNA
CPE names CISA-ADP · 6
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:siemens:simatic_energy_manager_basic:*:*:*:*:*:*:*:* | — | — | Siemens |
| cpe:2.3:a:siemens:simatic_energy_manager_pro:*:*:*:*:*:*:*:* | — | — | Siemens |
| cpe:2.3:h:siemens:simatic_ipc_diagbase:-:*:*:*:*:*:*:* | not specified by CISA-ADP | — | Siemens |
| cpe:2.3:h:siemens:simatic_ipc_diagmonitor:-:*:*:*:*:*:*:* | not specified by CISA-ADP | — | Siemens |
| cpe:2.3:a:siemens:simit_v10:*:*:*:*:*:*:*:* | — | — | Siemens |
| cpe:2.3:a:siemens:simit_v11:*:*:*:*:*:*:*:* | — | — | Siemens |
- cpe:2.3:a:siemens:simatic_energy_manager_basic:*:*:*:*:*:*:*:* Versions — — ·Siemens
- cpe:2.3:a:siemens:simatic_energy_manager_pro:*:*:*:*:*:*:*:* Versions — — ·Siemens
- cpe:2.3:h:siemens:simatic_ipc_diagbase:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Siemens
- cpe:2.3:h:siemens:simatic_ipc_diagmonitor:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Siemens
- cpe:2.3:a:siemens:simit_v10:*:*:*:*:*:*:*:* Versions — — ·Siemens
- cpe:2.3:a:siemens:simit_v11:*:*:*:*:*:*:*:* Versions — — ·Siemens
Remediation
- Fix · CNA SIMATIC Energy Manager Basic (Siemens) Fixed in V7.5
- Fix · CNA SIMATIC Energy Manager PRO (Siemens) Fixed in V7.5
- Fix · CNA SIMIT V11 (Siemens) Fixed in V11.1
Timeline
- 2026-10-02 Threatist record created from CVE-2023-52891
- 2026-10-03 Alias added: GHSA-gccj-rgh5-5x96
References
More Siemens vulnerabilities
- TI-2026-20057 Authentication bypass in Fortinet FortiWeb KEVCVSS 3.1CRITICAL 9.4
- TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
- TI-2025-18911 Heap-based buffer overflow in Fortinet FortiSwitchManager KEVCVSS 3.1CRITICAL 9.8
- TI-2025-09686 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.8
- TI-2022-07142 Code injection in Spring Framework KEVCVSS 3.1CRITICAL 9.8
- TI-2021-19919 Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints KEVCVSS 3.1CRITICAL 10.0
Sources
- CVE-2023-52891 · CVE Program
- CVE-2023-52891 · NVD
- FIRST EPSS
- GHSA-gccj-rgh5-5x96 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences