Analysis Summary

CVE-2024-39869 CVSS:6.5

Siemens SINEMA Remote Connect Server is vulnerable to a denial of service, caused by improper check for unusual or exceptional conditions. By uploading a specially crafted certificate, a remote authenticated attacker could exploit this vulnerability to cause a denial of service condition.

CVE-2024-35303 CVSS:7.8

Siemens Tecnomatix Plant Simulation could allow a remote attacker to execute arbitrary code on the system, caused by a type confusion vulnerability. By persuading a victim to parse specially crafted MODEL files, an attacker could exploit this vulnerability to execute arbitrary code on the system.

CVE-2024-35292 CVSS:8.2

Siemens SIMATIC could allow a remote attacker to obtain sensitive information, caused by using a predictable IP ID sequence number. By sending a specially crafted request, a remote attacker could exploit this vulnerability to obtain sensitive information and caused a denial of service.

Impact

• Gain Access
• Denial of Service

Indicators of Compromise

CVE

• CVE-2024-39869
• CVE-2024-35303
• CVE-2024-35292

Affected Vendors

Affected Products

• Siemens SINEMA Remote Connect Server 3.2
• Siemens Tecnomatix Plant Simulation V2302
• Siemens Tecnomatix Plant Simulation V2404
• Siemens SIMATIC S7-200 SMART CPU CR40
• Siemens SIMATIC S7-200 SMART CPU CR60
• Siemens SIMATIC S7-200 SMART CPU SR20

Remediation

Refer to Siemens Security Advisory for patch, upgrade or suggested workaround information.

CVE-2024-39869

CVE-2024-35303

CVE-2024-35292