PT-2012-1016 · Siemens · Simatic Wincc

Aleksandr Tlyapov · Publicado 2012-12-23 · Atualizado 2014-07-25 · CVE-2014-4682

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC versions prior to 7.3

Description The issue is related to an error that occurs when processing a specially crafted HTTP packet, allowing an unauthenticated attacker to gain access to confidential information by sending a specially crafted HTTP request to ports 80/tcp and 443/tcp. This can be achieved through the WebNavigator server, which allows remote attackers to obtain sensitive information via an HTTP request.

Recommendations For versions prior to 7.3, update to version 7.3 or later to resolve the issue. As a temporary workaround, consider restricting access to ports 80/tcp and 443/tcp to minimize the risk of exploitation.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2014-00405

CVE-2014-4682

Produtos afetados

Simatic Wincc

Referências · 10

• http://securityfocus.com/bid/68876 · Nota
• http://siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-214365.pdf%20http://securitylab.ru/lab/PT-2014-12 · Nota
• http://siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-214365.pdf · Aviso do Fabricante
• http://ics-cert.us-cert.gov//advisories/ICSA-14-205-02 · Nota
• https://bdu.fstec.ru/vul/2014-00405 · Nota de Segurança
• http://secunia.com/advisories/60392 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=2014-4682 · Nota de Segurança
• http://secunia.com/advisories/60388 · Nota
• http://osvdb.org/show/osvdb/109485 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-4682 · Nota de Segurança