PT-2013-1038 · Siemens · Simatic Wincc

Aleksandr Tlyapov

+1

·

Publicado

2013-04-16

·

Atualizado

2014-07-25

·

CVE-2014-4686

CVSS v2.0

6.8

Média

VetorAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC versions prior to 7.3
Description The issue concerns a hardcoded encryption key in the Project administration application. This allows remote attackers to obtain sensitive information by extracting the key from another product installation and then using it to sniff network traffic on TCP port 1030. The vulnerability can be exploited to elevate privileges in the WinCC Project Administration application, given that an attacker can intercept data transmitted by an authorized user over the network through port 1030/tcp.
Recommendations For versions prior to 7.3, update to version 7.3 or later to resolve the issue. As a temporary workaround, consider restricting access to TCP port 1030 to minimize the risk of exploitation.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-321

Identificadores relacionados

BDU:2014-00409
CVE-2014-4686

Produtos afetados

Simatic Wincc