Siemens has released a statement regarding the vulnerability CVE-2024-35783, a critical flaw with a CVSS score of 9.4. This vulnerability affects key industrial systems such as SIMATIC PCS 7, SIMATIC Process Historian, and SIMATIC WinCC, and allows an authenticated attacker to execute arbitrary commands, potentially compromising the integrity of critical industrial control systems.

The vulnerability arises from improper privilege handling in the database server. In specific configurations, the server may run with elevated privileges, enabling an attacker to gain administrative control over the affected systems, potentially compromising critical data and alarms in industrial environments.

For more details and updates, visit the following link: Siemens Security Advisory.