PatchSiren cyber security CVE debrief

CVE-2023-32032 Siemens CVE debrief

CVE-2023-32032 is a .NET and Visual Studio elevation of privilege vulnerability affecting Siemens ST7 ScadaConnect (6NH7997-5DA10-0AA0). Published on June 11, 2024, this vulnerability carries a CVSS 3.1 score of 6.5 (MEDIUM severity) with a vector of CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H/E:P/RL:O/RC:C. The attack requires local access with low privileges, high attack complexity, and no user interaction, potentially allowing an attacker to achieve high impact on integrity and availability with low confidentiality impact. Siemens has released a vendor fix: users should update to version 1.1 or later. This vulnerability is not listed in CISA's Known Exploited Vulnerabilities (KEV) catalog.

Vendor: Siemens
Product: ST7 ScadaConnect (6NH7997-5DA10-0AA0)
CVSS: MEDIUM 6.5
CISA KEV: Not listed in stored evidence
Original CVE published: 2024-06-11
Original CVE updated: 2024-06-11
Advisory published: 2024-06-11
Advisory updated: 2024-06-11

Who should care

Organizations operating Siemens ST7 ScadaConnect (6NH7997-5DA10-0AA0) in industrial control system environments, particularly those in critical infrastructure sectors relying on this product for SCADA connectivity. System administrators, OT security teams, and asset owners should prioritize patching to version 1.1 or later.

Technical summary

This vulnerability stems from a .NET and Visual Studio elevation of privilege issue in Siemens ST7 ScadaConnect. The CVSS 3.1 vector (AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H) indicates local attack vector with high complexity, requiring low privileges but no user interaction. Successful exploitation could result in high impact to system integrity and availability. Siemens has addressed this in version 1.1 and later. The vulnerability affects industrial control system environments where ST7 ScadaConnect is deployed for SCADA connectivity functions.

Defensive priority

medium

Recommended defensive actions

Apply the vendor-provided security update to version 1.1 or later for Siemens ST7 ScadaConnect (6NH7997-5DA10-0AA0)
Review and implement CISA ICS recommended practices for defense-in-depth strategies
Monitor for additional security advisories from Siemens CERT portal regarding this product
Ensure least-privilege access controls are enforced on systems running affected software
Consider network segmentation for industrial control systems to limit lateral movement potential

Evidence notes

CVE published and modified 2024-06-11 per CISA CSAF advisory ICSA-24-165-04. CVSS vector and remediation details sourced from official Siemens and CISA documentation. Not present in KEV catalog.

Official resources

2024-06-11