PT-2013-2514 · Siemens · Siemens Wincc

Artem Chaykin + 2 · Publicado 2013-03-21 · Atualizado 2013-03-22 · CVE-2013-0669

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Siemens WinCC (TIA Portal) version 11

Description The issue allows remote authenticated users to cause a denial of service, resulting in a daemon crash, by sending a crafted HTTP request to the HMI web application.

Recommendations For version 11, apply the necessary patch or update to fix the issue, or consider temporarily restricting access to the HMI web application to minimize the risk of exploitation.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2013-0669

Produtos afetados

Siemens Wincc

Referências · 3

• http://siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-212483.pdf · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-0669 · Nota de Segurança
• http://ics-cert.us-cert.gov/pdf/ICSA-13-079-03.pdf · Nota