PT-2012-1898 · Siemens · Wincc V11 Runtime Advanced+9

Publicado 2012-02-03 · Atualizado 2012-02-06 · CVE-2011-4514

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Siemens WinCC flexible versions 2004 through 2008 Siemens WinCC V11 (aka TIA portal) Siemens TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels Siemens WinCC V11 Runtime Advanced Siemens WinCC flexible Runtime

Description The issue concerns the lack of authentication in the TELNET daemon, making it easier for remote attackers to gain access via a TCP session.

Recommendations For Siemens WinCC flexible versions 2004 through 2008, consider disabling the TELNET daemon until a patch is available. For Siemens WinCC V11 (aka TIA portal), restrict access to the TELNET daemon to minimize the risk of exploitation. For Siemens TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels, avoid using the TELNET daemon in unsecured environments. For Siemens WinCC V11 Runtime Advanced and Siemens WinCC flexible Runtime, limit network exposure to reduce the risk of unauthorized access.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2011-4514

Produtos afetados

Comfort Panels

Mp

Mobile Panels

Op

Simatic Hmi Panels

Tp

Wincc V11

Wincc V11 Runtime Advanced

Wincc Flexible

Wincc Flexible Runtime

Referências · 3

• http://us-cert.gov/control_systems/pdf/ICSA-12-030-01.pdf · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-4514 · Nota de Segurança
• http://siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345442.pdf · Aviso do Fabricante