Security Resilience

CVE-2023-28829

Siemens Simatic Pcs 7 8.2 … 9.1

Published
13 June 2023
Modified
21 November 2024
Patch / advisory
View advisory
CVSS Score v3.1 3.9
Click a component to see what it means
Raw vectorCVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L
EPSS Score 0.0029 20th percentile
Risk Priority 32 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2023-28829 is a low-severity Use of Obsolete Function (CWE-477) vulnerability in Siemens Simatic Pcs 7. Its CVSS base score is 3.9 (Low).

Operationally, exploitation aligns with the MITRE ATT&CK technique Steganography (T1001.002); ranked at the 20th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

OWASP Top 10 for Web (2025)

A03:2025 Software Supply Chain Failures

EU & UK References

Vulnerability Data

A vulnerability has been identified in SIMATIC NET PC Software V14 (All versions), SIMATIC NET PC Software V15 (All versions), SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All versions), SIMATIC WinCC…

more

(All versions < V8.0), SINAUT Software ST7sc (All versions). Before SIMATIC WinCC V8, legacy OPC services (OPC DA (Data Access), OPC HDA (Historical Data Access), and OPC AE (Alarms & Events)) were used per default. These services were designed on top of the Windows ActiveX and DCOM mechanisms and do not implement state-of-the-art security mechanisms for authentication and encryption of contents.

CWE(s)
CWE-477NVD-CWE-noinfo

Related Threats

MITRE ATT&CK Enterprise Techniques

T1001.002 Steganography Command And Control
Adversaries may use steganographic techniques to hide command and control traffic to make detection efforts more difficult.
attack.mitre.org →
T1003.001 LSASS Memory Credential Access
Adversaries may attempt to access credential material stored in the process memory of the Local Security Authority Subsystem Service (LSASS).
attack.mitre.org →
T1003.002 Security Account Manager Credential Access
Adversaries may attempt to extract credential material from the Security Account Manager (SAM) database either through in-memory techniques or through the Windows Registry where the SAM database is stored.
attack.mitre.org →
T1003.003 NTDS Credential Access
Adversaries may attempt to access or create a copy of the Active Directory domain database in order to steal credential information, as well as obtain other information about domain members such as devices, users, and access rights.
attack.mitre.org →
T1003.004 LSA Secrets Credential Access
Adversaries with SYSTEM access to a host may attempt to access Local Security Authority (LSA) secrets, which can contain a variety of different credential materials, such as credentials for service accounts.
attack.mitre.org →
T1010 Application Window Discovery Discovery
Adversaries may attempt to get a listing of open application windows.
attack.mitre.org →
Derived from this CVE’s CWE(s) via the direct CWE→ATT&CK cross-walk.

CVEs Like This One

CVE-2023-48363Same product: Siemens Simatic Pcs 7
CVE-2023-48364Same product: Siemens Simatic Pcs 7
CVE-2023-25910Same product: Siemens Simatic Pcs 7
CVE-2024-24924Same vendor: Siemens
CVE-2024-36266Same vendor: Siemens
CVE-2023-44321Same vendor: Siemens
CVE-2024-29119Same vendor: Siemens
CVE-2023-24581Same vendor: Siemens
CVE-2024-39569Same vendor: Siemens
CVE-2025-40830Same vendor: Siemens

Affected Assets

siemens
simatic net pc software
14.0, 15.0
siemens
simatic pcs 7
8.2, 9.0, 9.1
siemens
simatic wincc
≤ 8.0
siemens
sinaut st7sc
all versions

Mitigating Controls

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

PM-15 Security and Privacy Groups and Associations
addresses: CWE-477

Institutionalized information sharing keeps developers aware of obsolete functions and the need to replace them with supported alternatives.

RA-4 Risk Assessment Update
addresses: CWE-477

Regular reassessment flags use of obsolete functions whose security properties have degraded or whose replacements contain fixes for known weaknesses.

SA-22 Unsupported System Components
addresses: CWE-477

Eliminates reliance on functions or components explicitly declared obsolete and unsupported by their maintainers.

SI-2 Flaw Remediation
addresses: CWE-477

Software and firmware updates replace obsolete functions whose retained presence leaves systems exposed to publicly known weaknesses.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

ID.AM-08 partial match
blocks

Lifecycle management of software includes replacing obsolete functions and code.

PR.PS-02 partial match
blocks

Software maintenance and replacement directly eliminates use of deprecated functions.

PR.PS-06 partial match
blocks

Secure SDLC practices enforce review and removal of obsolete functions during development.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

A.8.19 Installation of software on operational systems partial match
removes
A.8.25 Secure development life cycle partial match
blocks

Secure SDLC processes include code reviews and maintenance that catch obsolete functions.

A.8.26 Application security requirements partial match
removes
A.8.27 Secure system architecture and engineering principles partial match
removes
A.8.28 Secure coding partial match
prevents

Secure coding standards explicitly prohibit use of deprecated/obsolete functions.

A.8.32 Change management partial match
blocks

Change management can trigger reviews that remove obsolete functions but does not directly address them.

References