CVE-2024-33698 | Siemens SIMATIC Information Server 2022 UMC heap-based overflow (ssa-039007)

A vulnerability was found in Siemens SIMATIC Information Server 2022, SIMATIC Information Server 2024, SIMATIC PCS neo, SINEC NMS and Totally Integrated Automation Portal and classified as very critical. Affected by this issue is some unknown functionality of the component UMC. The manipulation leads to heap-based buffer overflow.

This vulnerability is handled as CVE-2024-33698. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.