Read the docs
TI-2024-23652 Aliases CVE-2024-35783GHSA-h5rg-jpqm-g43g

A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC…

Priority MEDIUM 43CWE-250Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Privilege escalation
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-250.

Summary

A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All versions < V2020 SP2 Update 5), SIMATIC Information Server 2022 (All versions < V2022 SP1 Update 2), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC06), SIMATIC Process Historian 2020 (All versions < V2020 SP2 Update 5), SIMATIC Process Historian 2022 (All versions < V2022 SP1 Update 2), SIMATIC WinCC Runtime Professional V18 (All versions < V18 Update 5), SIMATIC WinCC Runtime Professional V19 (All versions < V19 Update 3), SIMATIC WinCC V7.4 (All versions), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 18), SIMATIC WinCC V8.0 (All versions < V8.0 Update 5). The affected products run their DB server with elevated privileges which could allow an authenticated attacker to execute arbitrary OS commands with administrative privileges.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0061 49th percentileScored 2026-11-07
Fix Fixed SIMATIC Information Server 2020 (Siemens): V2020 SP2 Update 5SIMATIC Information Server 2022 (Siemens): V2022 SP1 Update 2+7 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SiemensSIMATIC BATCH V9.1all versions—No fix listedCNA
SiemensSIMATIC Information Server 2020before V2020 SP2 Update 5V2020 SP2 Update 5Patch availableCNA
SiemensSIMATIC Information Server 2022before V2022 SP1 Update 2V2022 SP1 Update 2Patch availableCNA
SiemensSIMATIC PCS 7 V9.1before V9.1 SP2 UC06V9.1 SP2 UC06Patch availableCNA
SiemensSIMATIC Process Historian 2020before V2020 SP2 Update 5V2020 SP2 Update 5Patch availableCNA
SiemensSIMATIC Process Historian 2022before V2022 SP1 Update 2V2022 SP1 Update 2Patch availableCNA
SiemensSIMATIC WinCC Runtime Professional V18before V18 Update 5V18 Update 5Patch availableCNA
SiemensSIMATIC WinCC Runtime Professional V19before V19 Update 3V19 Update 3Patch availableCNA
SiemensSIMATIC WinCC V7.4all versions—No fix listedCNA
SiemensSIMATIC WinCC V7.5before V7.5 SP2 Update 18V7.5 SP2 Update 18Patch availableCNA
SiemensSIMATIC WinCC V8.0before V8.0 Update 5V8.0 Update 5Patch availableCNA
  • SIMATIC BATCH V9.1 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC Information Server 2020 VendorSiemens Affected before V2020 SP2 Update 5 Fixed in V2020 SP2 Update 5 Patch available CNA
  • SIMATIC Information Server 2022 VendorSiemens Affected before V2022 SP1 Update 2 Fixed in V2022 SP1 Update 2 Patch available CNA
  • SIMATIC PCS 7 V9.1 VendorSiemens Affected before V9.1 SP2 UC06 Fixed in V9.1 SP2 UC06 Patch available CNA
  • SIMATIC Process Historian 2020 VendorSiemens Affected before V2020 SP2 Update 5 Fixed in V2020 SP2 Update 5 Patch available CNA
  • SIMATIC Process Historian 2022 VendorSiemens Affected before V2022 SP1 Update 2 Fixed in V2022 SP1 Update 2 Patch available CNA
  • SIMATIC WinCC Runtime Professional V18 VendorSiemens Affected before V18 Update 5 Fixed in V18 Update 5 Patch available CNA
  • SIMATIC WinCC Runtime Professional V19 VendorSiemens Affected before V19 Update 3 Fixed in V19 Update 3 Patch available CNA
  • SIMATIC WinCC V7.4 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIMATIC WinCC V7.5 VendorSiemens Affected before V7.5 SP2 Update 18 Fixed in V7.5 SP2 Update 18 Patch available CNA
  • SIMATIC WinCC V8.0 VendorSiemens Affected before V8.0 Update 5 Fixed in V8.0 Update 5 Patch available CNA

CPE names CISA-ADP · 9

CPEVersionsRoleVendor
cpe:2.3:a:siemens:simatic_wincc_runtime_professional:18:*:*:*:*:*:*:*18—Siemens
cpe:2.3:a:siemens:simatic_wincc_runtime_professional:19:*:*:*:*:*:*:*19—Siemens
cpe:2.3:h:siemens:simatic_process_historian:2020:-:*:*:*:*:*:*2020—Siemens
cpe:2.3:a:siemens:simatic_process_historian:2022:*:*:*:*:*:*:*2022—Siemens
cpe:2.3:a:siemens:simatic_pcs7:*:*:*:*:*:*:*:*——Siemens
cpe:2.3:a:siemens:simatic_information_server:2020:-:*:*:*:*:*:*2020—Siemens
cpe:2.3:a:siemens:simatic_information_server:2022:*:*:*:*:*:*:*2022—Siemens
cpe:2.3:a:siemens:simatic_batch:9.1:-:*:*:*:*:*:*9.1—Siemens
cpe:2.3:a:siemens:simatic_wincc:*:*:*:*:*:*:*:*——Siemens
  • cpe:2.3:a:siemens:simatic_wincc_runtime_professional:18:*:*:*:*:*:*:* Versions 18 — ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc_runtime_professional:19:*:*:*:*:*:*:* Versions 19 — ·Siemens
  • cpe:2.3:h:siemens:simatic_process_historian:2020:-:*:*:*:*:*:* Versions 2020 — ·Siemens
  • cpe:2.3:a:siemens:simatic_process_historian:2022:*:*:*:*:*:*:* Versions 2022 — ·Siemens
  • cpe:2.3:a:siemens:simatic_pcs7:*:*:*:*:*:*:*:* Versions — — ·Siemens
  • cpe:2.3:a:siemens:simatic_information_server:2020:-:*:*:*:*:*:* Versions 2020 — ·Siemens
  • cpe:2.3:a:siemens:simatic_information_server:2022:*:*:*:*:*:*:* Versions 2022 — ·Siemens
  • cpe:2.3:a:siemens:simatic_batch:9.1:-:*:*:*:*:*:* Versions 9.1 — ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:*:*:*:*:*:*:*:* Versions — — ·Siemens

Remediation

  • Fix · CNA SIMATIC Information Server 2020 (Siemens) Fixed in V2020 SP2 Update 5
  • Fix · CNA SIMATIC Information Server 2022 (Siemens) Fixed in V2022 SP1 Update 2
  • Fix · CNA SIMATIC PCS 7 V9.1 (Siemens) Fixed in V9.1 SP2 UC06
  • Fix · CNA SIMATIC Process Historian 2020 (Siemens) Fixed in V2020 SP2 Update 5
  • Fix · CNA SIMATIC Process Historian 2022 (Siemens) Fixed in V2022 SP1 Update 2
  • Fix · CNA SIMATIC WinCC Runtime Professional V18 (Siemens) Fixed in V18 Update 5
  • Fix · CNA SIMATIC WinCC Runtime Professional V19 (Siemens) Fixed in V19 Update 3
  • Fix · CNA SIMATIC WinCC V7.5 (Siemens) Fixed in V7.5 SP2 Update 18
  • Fix · CNA SIMATIC WinCC V8.0 (Siemens) Fixed in V8.0 Update 5

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-35783
  2. 2026-10-03 Alias added: GHSA-h5rg-jpqm-g43g

References

Other 1

  • TI-2026-20057 Authentication bypass in Fortinet FortiWeb KEVCVSS 3.1CRITICAL 9.4
  • TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-18911 Heap-based buffer overflow in Fortinet FortiSwitchManager KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-09686 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.8
  • TI-2022-07142 Code injection in Spring Framework KEVCVSS 3.1CRITICAL 9.8
  • TI-2021-19919 Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints KEVCVSS 3.1CRITICAL 10.0
See all 2487 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences