OTPulse
FeedAboutContact

Multiple vulnerabilities in third-party components in ST7 ScadaConnect before V1.1

Act Now8.2SSA-341067Jun 11, 2024
Attack VectorNetwork
Auth RequiredNone
ComplexityLow
User InteractionNone needed
Summary

Multiple vulnerabilities in third-party components in ST7 ScadaConnect before V1.1. The vulnerabilities include integer overflow (CWE-190), use-after-free (CWE-415), improper certificate validation (CWE-295), improper input validation (CWE-20), null pointer dereference (CWE-476), insufficient encryption (CWE-311), buffer overflow (CWE-119), and uncontrolled resource consumption (CWE-400). These flaws affect the ScadaConnect application's ability to securely process data and validate external connections.

What this means
What could happen
An attacker with network access could crash the ScadaConnect application, disrupt communication with SCADA devices, or potentially execute commands that interfere with energy system operations.
Who's at risk
Energy sector operators running ST7 ScadaConnect for SCADA communications and monitoring. This includes electric utilities and generation facilities that rely on ScadaConnect for real-time monitoring and control of power systems and substations.
How it could be exploited
An attacker on the network could send malicious data packets or establish invalid connections to ST7 ScadaConnect without authentication. Integer overflow, buffer overflow, or null pointer dereference vulnerabilities could cause the application to crash (denial of service) or allow code execution. Improper certificate validation could allow man-in-the-middle attacks to intercept or modify SCADA communications.
Prerequisites
  • Network access to ST7 ScadaConnect application port (network-reachable device)
  • No authentication required to trigger most vulnerabilities
  • Vulnerable version (any version before V1.1)
remotely exploitableno authentication requiredlow complexityactively exploited (KEV)high EPSS score (94.5%)affects energy operations
Exploitability
Actively exploited — confirmed by CISA KEV
Affected products (1)
ProductAffected VersionsFix Status
ST7 ScadaConnect<V1.11.1
Remediation & Mitigation
0/1
Do now
0/1
HOTFIXUpdate ST7 ScadaConnect to version 1.1 or later
View full Siemens ProductCERT advisory
↑↓ Navigate · Esc Close
API: /api/v1/advisories/a6c8b99f-d12b-4b4e-8961-012b0b73b808
Multiple vulnerabilities in third-party components in ST7 ScadaConnect before V1.1 | CVSS 8.2 - OTPulse