PT-2014-1218 · Siemens · Simatic Wincc

Gleb Gritsai

+2

·

Publicado

2014-02-06

·

Atualizado

2017-08-29

·

CVE-2014-1697

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC OA versions prior to 3.12 P002 January
Description The issue is related to the integrated web server in Siemens SIMATIC WinCC OA, which allows remote attackers to execute arbitrary code via crafted packets sent to TCP port 4999. This is due to errors that occur when processing specially formed TCP packets, enabling an attacker to exploit the issue and execute arbitrary code by sending crafted packets to the specified port.
Recommendations For versions prior to 3.12 P002 January, update to version 3.12 P002 January or later to resolve the issue. As a temporary workaround, consider restricting access to TCP port 4999 to minimize the risk of exploitation.

Correção

Authentication Bypass Using an Alternate Path or Channel

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-288

Identificadores relacionados

BDU:2014-00391
CVE-2014-1697

Produtos afetados

Simatic Wincc