CVE-2024-30321

CVSS V2 None CVSS V3 None

Description

A vulnerability has been identified in SIMATIC PCS 7 V9.1 (All versions), SIMATIC WinCC Runtime Professional V18 (All versions), SIMATIC WinCC Runtime Professional V19 (All versions < V19 Update 2), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 23), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 17), SIMATIC WinCC V8.0 (All versions < V8.0 Update 5). The affected products do not properly handle certain requests to their web application, which may lead to the leak of privileged information. This could allow an unauthenticated remote attacker to retrieve information such as users and passwords.

Overview

CVE ID
CVE-2024-30321

Assigner
siemens

Vulnerability Status
PUBLISHED

Published Version
2024-07-09T12:04:43.997Z

Last Modified Date
2024-07-09T12:04:43.997Z

Weakness Enumerations

CWE	URL
CWE-359	http://cwe.mitre.org/data/definitions/359.html

References

Reference URL	Reference Tags
https://cert-portal.siemens.com/productcert/html/ssa-883918.html

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-30321
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-30321

History

Created	Old Value	New Value	Data Type	Notes
2024-07-10 13:37:09				Added to TrackCVE