Skip to content
Fencer Vulns
critical 9.8

CVE-2024-49775 json

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2501.0001), Opcenter Intelligence (All versions < V25…

published 2024-12-16 22 mo ago modified 2026-06-17 4 mo ago also EUVD-2024-43871

cvss
9.8
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
1.5%
EPSS 1.5% chance of exploitation in 30 days, percentile 74%
public exploits
0
none known

Summary

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2501.0001), Opcenter Intelligence (All versions < V2501.0001), Opcenter Quality (All versions < V2512), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 3), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1), SINEC NMS (All versions if operated in conjunction with UMC < V2.15), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V18 (All versions), Totally Integrated Automation Portal (TIA Portal) V19 (All versions). Affected products contain a heap-based buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to execute arbitrary code.

Patch / fix

  • Siemens Opcenter Execution Foundation V2501.0001
  • Siemens Opcenter Intelligence V2501.0001
  • Siemens Opcenter Quality V2512
  • Siemens Opcenter RDnL V2410
  • Siemens SIMATIC PCS neo V4.1 V4.1 Update 3
  • Siemens SIMATIC PCS neo V5.0 V5.0 Update 1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-24-354-04 updated cvss 9.8

Siemens User Management Component

  • Siemens Opcenter Execution Foundation < 2501.0001
    affected: fixed in V2501.0001, mitigation support.sw.siemens.com
  • Siemens Opcenter Intelligence < 2501.0001
    affected: fixed in V2501.0001, mitigation support.sw.siemens.com
  • Siemens Opcenter Quality < 2512
    affected: fixed in V2512, mitigation support.sw.siemens.com
  • Siemens Opcenter RDnL < 2410
    affected: fixed in V2410, mitigation support.sw.siemens.com
  • Siemens SIMATIC PCS neo V4.0
    affected: mitigation, no fix planned
  • Siemens SIMATIC PCS neo V4.1 <V4.1_Update_3
    affected: fixed in V4.1, mitigation support.industry.siemens.com
  • Siemens SIMATIC PCS neo V5.0 <V5.0_Update_1
    affected: fixed in V5.0, mitigation support.industry.siemens.com
  • Siemens SINEC NMS
    affected: fixed in V2.15.1.1, mitigation
show 3 more
  • Siemens Totally Integrated Automation Portal (TIA Portal) V16
    affected: mitigation, no fix planned
  • Siemens Totally Integrated Automation Portal (TIA Portal) V17 Siemens Totally Integrated Automation Portal (TIA Portal) V18 Siemens Totally Integrated Automation Portal (TIA Portal) V19
    affected: fixed in V2.15.1.1, mitigation
  • Siemens Desigo ABT
    not affected: component not present

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
yes
Technical impact
total
Assessed
22 mo ago

Exploit prediction

1.51% chance of exploitation in the next 30 days, higher than 74% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CNA 4.0 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CNA 4.0 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affected products

  • Siemens Opcenter Execution Foundation
  • Siemens Opcenter Intelligence
  • Siemens Opcenter Quality
  • Siemens Opcenter RDnL
  • Siemens SIMATIC PCS neo V4.0
  • Siemens SIMATIC PCS neo V4.1
  • Siemens SIMATIC PCS neo V5.0
  • Siemens SINEC NMS
  • Siemens Totally Integrated Automation Portal (TIA Portal) V16
  • Siemens Totally Integrated Automation Portal (TIA Portal) V17
  • Siemens Totally Integrated Automation Portal (TIA Portal) V18
  • Siemens Totally Integrated Automation Portal (TIA Portal) V19

Classification

Weakness
  • CWE-122 Heap-based Buffer Overflow

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.