Gleb Gritsai

**Name of the Vulnerable Software and Affected Versions** Schneider Electric InduSoft Web Studio versions prior to 7.1.3.5 Patch 5 Wonderware InTouch Machine Edition versions prior to 7.1 SP3 Patch 5 **Description** The issue allows local users to obtain sensitive information by reading a file due to the use of cleartext for project-window password storage. **Recommendations** For Schneider Electric InduSoft Web Studio versions prior to 7.1.3.5 Patch 5, update to version 7.1.3.5 Patch 5 or later. For Wonderware InTouch Machine Edition versions prior to 7.1 SP3 Patch 5, update to version 7.1 SP3 Patch 5 or later.

**Name of the Vulnerable Software and Affected Versions** Inductive Automation Ignition version 7.7.2 **Description** A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML. **Recommendations** For version 7.7.2, update to a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Schneider Electric InduSoft Web Studio versions prior to 7.1.3.4 SP3 Patch 4 Schneider Electric InTouch Machine Edition 2014 versions prior to 7.1.3.4 SP3 Patch 4 **Description** The issue allows local users to obtain sensitive information by discovering a hardcoded cleartext password used to control read access to Project files and Project Configuration files. **Recommendations** For Schneider Electric InduSoft Web Studio versions prior to 7.1.3.4 SP3 Patch 4, update to version 7.1.3.4 SP3 Patch 4 or later. For Schneider Electric InTouch Machine Edition 2014 versions prior to 7.1.3.4 SP3 Patch 4, update to version 7.1.3.4 SP3 Patch 4 or later.

**Name of the Vulnerable Software and Affected Versions** Siemens SIMATIC WinCC (TIA Portal) versions prior to 13 SP1 Siemens SIMATIC WinCC flexible versions prior to 2008 SP3 Up7 **Description** The issue concerns the remote-management module in certain Siemens products, where credentials are not properly encrypted in transit. This makes it easier for remote attackers to determine cleartext credentials by sniffing the network and conducting a decryption attack. **Recommendations** For Siemens SIMATIC WinCC (TIA Portal) versions prior to 13 SP1, update to version 13 SP1 or later. For Siemens SIMATIC WinCC flexible versions prior to 2008 SP3 Up7, update to version 2008 SP3 Up7 or later.

**Name of the Vulnerable Software and Affected Versions** Siemens SIMATIC STEP 7 (TIA Portal) versions prior to 14 **Description** The issue is related to the incorrect storage of pre-shared keys in TIA project files. This could allow a local attacker to gain access to sensitive information, potentially by conducting a brute-force attack after obtaining access to a file. **Recommendations** For versions prior to 14, update to version 14 or later to resolve the issue. As a temporary workaround, consider restricting access to TIA project files to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Siemens SIMATIC WinCC OA versions prior to 3.12 P002 January **Description** The issue is related to the integrated web server in Siemens SIMATIC WinCC OA, which allows remote attackers to execute arbitrary code via crafted packets sent to TCP port 4999. This is due to errors that occur when processing specially formed TCP packets, enabling an attacker to exploit the issue and execute arbitrary code by sending crafted packets to the specified port. **Recommendations** For versions prior to 3.12 P002 January, update to version 3.12 P002 January or later to resolve the issue. As a temporary workaround, consider restricting access to TCP port 4999 to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Invensys Wonderware Information Server (WIS) versions 4.0 SP1 through 5.0 **Description** The issue allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. **Recommendations** For versions 4.0 SP1 through 5.0, as a temporary workaround, consider restricting access to XML documents or disabling the processing of external entities until a patch is available.