PatchSiren cyber security CVE debrief

CVE-2023-32032 Siemens CVE debrief

CVE-2023-32032 is a .NET and Visual Studio elevation of privilege vulnerability affecting Siemens ST7 ScadaConnect (6NH7997-5DA10-0AA0). Published on June 11, 2024, this vulnerability carries a CVSS 3.1 score of 6.5 (MEDIUM severity) with a vector of CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H/E:P/RL:O/RC:C. The attack requires local access with low privileges, high attack complexity, and no user interaction, potentially allowing an attacker to achieve high impact on integrity and availability with low confidentiality impact. Siemens has released a vendor fix: users should update to version 1.1 or later. This vulnerability is not listed in CISA's Known Exploited Vulnerabilities (KEV) catalog.

Vendor: Siemens
Product: ST7 ScadaConnect (6NH7997-5DA10-0AA0)
CVSS: MEDIUM 6.5
CISA KEV: Not listed in stored evidence
Original CVE published: 2023-11-14
Original CVE updated: 2023-11-14
Advisory published: 2023-11-14
Advisory updated: 2023-11-14

Who should care

Organizations operating Siemens ST7 ScadaConnect (6NH7997-5DA10-0AA0) in industrial control system environments, particularly those in critical infrastructure sectors relying on this product for SCADA connectivity. System administrators, OT security teams, and asset owners should prioritize patching to version 1.1 or later.

Technical summary

This vulnerability stems from a .NET and Visual Studio elevation of privilege issue in Siemens ST7 ScadaConnect. The CVSS 3.1 vector (AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H) indicates local attack vector with high complexity, requiring low privileges but no user interaction. Successful exploitation could result in high impact to system integrity and availability. Siemens has addressed this in version 1.1 and later. The vulnerability affects industrial control system environments where ST7 ScadaConnect is deployed for SCADA connectivity functions.

Defensive priority

medium

Recommended defensive actions

Apply the vendor-provided security update to version 1.1 or later for Siemens ST7 ScadaConnect (6NH7997-5DA10-0AA0)
Review and implement CISA ICS recommended practices for defense-in-depth strategies
Monitor for additional security advisories from Siemens CERT portal regarding this product
Ensure least-privilege access controls are enforced on systems running affected software
Consider network segmentation for industrial control systems to limit lateral movement potential

Evidence notes

CVE published and modified 2024-06-11 per CISA CSAF advisory ICSA-24-165-04. CVSS vector and remediation details sourced from official Siemens and CISA documentation. Not present in KEV catalog.

Sources and references

Verified primary and authoritative sources

CVE-2023-32032 CVE Program record
Publisher, destination, and source semantics verified

URL: https://www.cve.org/CVERecord?id=CVE-2023-32032

CVE Program - Official CVE Program record with source-provided CVE metadata.
CVE-2023-32032 NVD vulnerability detail
Publisher, destination, and source semantics verified

URL: https://nvd.nist.gov/vuln/detail/CVE-2023-32032

NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Source item URL
Unverified legacy reference

URL: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-165-04.json

cisa_csaf
Source reference
Unverified legacy reference

URL: https://cert-portal.siemens.com/productcert/csaf/ssa-341067.json

Reference
Source reference
Unverified legacy reference

URL: https://cert-portal.siemens.com/productcert/html/ssa-341067.html

Reference
Source reference
Unverified legacy reference

URL: https://cert-portal.siemens.com/productcert/pdf/ssa-341067.pdf

Reference
Source reference
Unverified legacy reference

URL: https://cert-portal.siemens.com/productcert/txt/ssa-341067.txt

Reference
Source reference
Unverified legacy reference

URL: https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-04

Reference
Source reference
Unverified legacy reference

URL: https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01

Reference
Source reference
Unverified legacy reference

URL: https://www.cisa.gov/resources-tools/resources/ics-recommended-practices

Reference

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.