#VU105636 Information Exposure Through Timing Discrepancy in Siemens products - CVE-2024-42512

Vulnerability identifier: #VU105636

Vulnerability risk: High

CVSSv4.0: 8.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/U:Amber]

CVE-ID: CVE-2024-42512

CWE-ID: CWE-208

Exploitation vector: Network

Exploit availability: Yes

Vulnerable software:
SIMATIC Energy Manager PRO
Other software / Other software solutions
Totally Integrated Automation Portal (TIA Portal)
Other software / Other software solutions
SIMIT Simulation Platform
Hardware solutions / Firmware

Vendor: Siemens

Description

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to the an exploitable timing discrepancy issue in the OPC UA .NET Standard Stack. A remote attacker can bypass application authentication when the deprecated Basic128Rsa15 security policy is enabled.

Mitigation
Install updates from vendor's website.

Vulnerable software versions

SIMATIC Energy Manager PRO: 7.2 Update 6 - 7.5

SIMIT Simulation Platform: All versions

Totally Integrated Automation Portal (TIA Portal): 19

---

External links
https://cert-portal.siemens.com/productcert/txt/ssa-858251.txt

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.