Siemens Desigo CC Missing Authentication Vulnerability Allowing Arbitrary SQL Execution

A vulnerability exists in Siemens Desigo CC, affecting all versions, when access from Installed Clients to the Desigo CC server is permitted from networks outside a highly protected zone, or only allowed within such zones. The server application improperly authenticates certain client requests. An unauthenticated remote attacker could exploit this flaw, potentially after modifying the client binary, to execute arbitrary SQL queries on the server database through the event port (default 4998/tcp).

Impact

Exploitation of this vulnerability could lead to unauthorized execution of SQL queries on the server database, allowing for potential data manipulation or extraction.

Remediation

To address this vulnerability, disable support for Installed Clients on the Desigo CC server and restrict access to the event port (default 4998/tcp).