PT-2014-1219 · Siemens · Simatic Wincc

Kirill Nesterov · Publicado 2014-02-06 · Atualizado 2017-08-29 · CVE-2014-1698

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC OA versions prior to 3.12 P002 January

Description The issue allows remote attackers to bypass the file system of the server in the context of the current user without authentication by sending specially crafted TCP packets. This is a directory traversal vulnerability that can be exploited to read arbitrary files via crafted packets to TCP port 4999.

Recommendations For versions prior to 3.12 P002 January, update to version 3.12 P002 January or later to resolve the issue. As a temporary workaround, consider restricting access to TCP port 4999 to minimize the risk of exploitation.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

BDU:2014-00392

CVE-2014-1698

Produtos afetados

Simatic Wincc

Referências · 9

• http://ics-cert.us-cert.gov/advisories/ICSA-14-035-01 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-1698 · Nota de Segurança
• http://osvdb.org/102811 · Nota
• http://siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-342587.pdf · Aviso do Fabricante
• http://securityfocus.com/bid/65349 · Nota
• https://bdu.fstec.ru/vul/2014-00392 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90935 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=2014-1698;%20http://osvdb.org/show/osvdb/102811;%20http://secunia.com/advisories/56651/;%20http://ics-cert.us-cert.gov/advisories/ICSA-14-035-01;%20http://cnnvd.org.cn/vulnerability/show/cv_id/2014020088;%20http://siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-342587.pdf;%20http://securitylab.ru/lab/PT-2013-79 · Nota de Segurança
• http://secunia.com/advisories/56651 · Nota