PT-2014-1220 · Siemens · Simatic Wincc

Publicado 2014-02-06 · Atualizado 2017-08-29 · CVE-2014-1699

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC OA versions prior to 3.12 P002 January

Description The issue allows remote attackers to cause a denial of service, specifically a monitoring-service outage, via malformed HTTP requests to port 4999. This can be exploited by sending specially crafted TCP packets, enabling an attacker to disrupt the monitoring service without needing to authenticate.

Recommendations For versions prior to 3.12 P002 January, update to version 3.12 P002 January or later to resolve the issue. As a temporary workaround, consider restricting access to port 4999 to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

BDU:2014-00393

CVE-2014-1699

Produtos afetados

Simatic Wincc

Referências · 9

• http://osvdb.org/102812 · Nota
• http://ics-cert.us-cert.gov/advisories/ICSA-14-035-01 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=2014-1699;%20http://osvdb.org/show/osvdb/102812;%20http://secunia.com/advisories/56651/;%20http://ics-cert.us-cert.gov/advisories/ICSA-14-035-01;%20http://cnnvd.org.cn/vulnerability/show/cv_id/2014020089;%20http://siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-342587.pdf;%20http://securitylab.ru/lab/PT-2013-80 · Nota de Segurança
• http://siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-342587.pdf · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-1699 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90936 · Nota
• http://securityfocus.com/bid/65347 · Nota
• https://bdu.fstec.ru/vul/2014-00393 · Nota de Segurança
• http://secunia.com/advisories/56651 · Nota