PT-2012-1893 · Siemens · Wincc V11 Runtime Advanced+9

Publicado 2012-02-03 · Atualizado 2012-02-06 · CVE-2011-4509

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Siemens WinCC flexible versions 2004 through 2008 Siemens WinCC V11 (aka TIA portal) Siemens TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels Siemens WinCC V11 Runtime Advanced Siemens WinCC flexible Runtime

Description The issue is related to an improperly selected default password for the administrator account in the HMI web server. This makes it easier for remote attackers to obtain access via a brute-force approach involving many HTTP requests.

Recommendations For Siemens WinCC flexible versions 2004 through 2008, change the default administrator password to a strong and unique password. For Siemens WinCC V11 (aka TIA portal), update the configuration to use a secure password for the administrator account. For Siemens TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels, restrict access to the administrator account until a secure password is set. For Siemens WinCC V11 Runtime Advanced and WinCC flexible Runtime, consider disabling the default administrator account or setting a strong password to prevent unauthorized access.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2011-4509

Produtos afetados

Comfort Panels

Mp

Mobile Panels

Op

Simatic Hmi Panels

Tp

Wincc V11

Wincc V11 Runtime Advanced

Wincc Flexible

Wincc Flexible Runtime

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2011-4509 · Nota de Segurança
• http://us-cert.gov/control_systems/pdf/ICSA-12-030-01.pdf · Nota
• http://siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345442.pdf · Aviso do Fabricante