[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1oetaR60ZsOuKRgHFXkuxsOeHVq-Jn5zZAQhwkcTRwM":3,"g5a-risk:CVE-2023-28829":138},{"success":4,"data":5,"meta":135},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":26,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":67,"references":68,"referencesCount":75,"weaknesses":76,"weaknessesCount":75,"isActivelyExploited":85,"cisaInfo":26,"otxData":26,"relatedBlogPosts":86,"seoMetadata":87,"configurations":112,"relatedVendorCves":133,"notableEvents":134},"CVE-2023-28829","What is CVE-2023-28829?","A vulnerability has been identified in SIMATIC NET PC Software V14 (All versions), SIMATIC NET PC Software V15 (All versions), SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All versions), SIMATIC WinCC (All versions \u003C V8.0), SINAUT Software ST7sc (All versions). Before SIMATIC WinCC V8, legacy OPC services (OPC DA (Data Access), OPC HDA (Historical Data Access), and OPC AE (Alarms & Events)) were used per default. These\r\nservices were designed on top of the Windows ActiveX and DCOM mechanisms and do not implement state-of-the-art security mechanisms for authentication and encryption of contents.","A vulnerability has been identified in SIMATIC NET PC Software V14 (All versions), SIMATIC NET PC Software V15 (All versions), SIMATIC PCS 7 V8.2 (All versio...","2023-06-13T09:15:16.707","2023-07-05T17:36:45.75",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":36,"ImpactScore":37},"productcert@siemens.com","Secondary",{"Version":20,"VectorString":33,"AttackVector":34,"AttackComplexity":25,"PrivilegesRequired":25,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":35,"BaseSeverity":22,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":22,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:A\u002FAC:H\u002FPR:H\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L","ADJACENT_NETWORK",3.9,0.5,3.4,0.00291,[38,38,38,38,38,38,38],"High",[42,47,50,54,57,60,64],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"siemens","simatic_net_pc_software","14.0","cpe:2.3:a:siemens:simatic_net_pc_software:14.0:*:*:*:*:*:*:*",{"vendor":43,"product":44,"version":48,"criteria":49,"vulnerable":4},"15.0","cpe:2.3:a:siemens:simatic_net_pc_software:15.0:*:*:*:*:*:*:*",{"vendor":43,"product":51,"version":52,"criteria":53,"vulnerable":4},"simatic_pcs_7","8.2","cpe:2.3:a:siemens:simatic_pcs_7:8.2:-:*:*:*:*:*:*",{"vendor":43,"product":51,"version":55,"criteria":56,"vulnerable":4},"9.0","cpe:2.3:a:siemens:simatic_pcs_7:9.0:-:*:*:*:*:*:*",{"vendor":43,"product":51,"version":58,"criteria":59,"vulnerable":4},"9.1","cpe:2.3:a:siemens:simatic_pcs_7:9.1:-:*:*:*:*:*:*",{"vendor":43,"product":61,"version":62,"criteria":63,"vulnerable":4},"simatic_wincc","*","cpe:2.3:a:siemens:simatic_wincc:*:*:*:*:*:*:*:*",{"vendor":43,"product":65,"version":62,"criteria":66,"vulnerable":4},"sinaut_st7sc","cpe:2.3:a:siemens:sinaut_st7sc:*:*:*:*:*:*:*:*",7,[69],{"url":70,"source":71,"tags":72},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fpdf\u002Fssa-508677.pdf","Siemens",[73,74],"Patch","Vendor Advisory",1,[77],{"id":78,"name":79,"description":80,"extendedDescription":81,"status":82,"abstraction":83,"structure":84},"CWE-477","Use of Obsolete Function","The code uses deprecated or obsolete functions, which suggests that the code has not been actively reviewed or maintained.","As programming languages evolve, functions occasionally become obsolete due to:\nFunctions that are removed are usually replaced by newer counterparts that perform the same task in some different and hopefully improved way.","Draft","Base","Simple",false,[],{"title":88,"metaDescription":89,"keywords":90,"canonicalUrl":91,"structuredData":92},"What is CVE-2023-28829? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-28829, a high severity cyber security vulnerability from 2023. A vulnerability has been identified in SIMATIC NET PC Softw...","CVE-2023-28829, CVE-2023-28829 vulnerability, CVE-2023-28829 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, siemens security, simatic_net_pc_software vulnerability, simatic_pcs_7 vulnerability, simatic_wincc vulnerability, sinaut_st7sc vulnerability","\u002Fwhat-is\u002Fcve-2023-28829",{"@context":93,"@type":94,"headline":88,"description":89,"datePublished":10,"dateModified":11,"author":95,"publisher":99,"about":103,"mainEntityOfPage":107,"articleSection":110,"keywords":111},"https:\u002F\u002Fschema.org","TechArticle",{"@type":96,"name":97,"url":98},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":96,"name":97,"url":98,"logo":100},{"@type":101,"url":102},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":104,"name":6,"description":105,"additionalType":106},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":108,"@id":109},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-28829","Cybersecurity","CVE-2023-28829, CVE-2023-28829 vulnerability, CVE-2023-28829 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[113],{"Operator":26,"Negate":26,"Nodes":114},[115],{"Operator":116,"Negate":26,"CPEMatch":117},"OR",[118,120,122,124,126,128,131],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":119,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"34A1F08A-1269-44F0-8B10-70A41F9306B2",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":121,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"79A56438-47FC-4184-9401-0B859037D0F1",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":123,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"3EEF9BE1-F6E2-4C05-8020-4D7540882464",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":125,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A42E3FB0-6C66-4702-BDC8-39EEA54B5C0F",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":127,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"0D25510C-F677-4A98-806C-FF644F11EEC6",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":129,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":130,"VersionEndIncluding":26},"D7E53AD8-C669-4E1F-9519-4DED57668766","8.0",{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":132,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B3C162C7-AC9A-44E3-BAE5-1C0D434F264B",[],[],{"lastModified":11,"cacheTime":136,"version":137},1792369546602,"2.0",{"score":139,"band":140,"action":141,"scoredAt":142},47,"Medium","Plan remediation","2026-10-16T06:58:18.693395+00:00"]