PT-2014-8612 · Siemens · Tia Portal+2

Publicado 2014-11-26 · Atualizado 2014-11-26 · CVE-2014-8551

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC versions 7.0 through 7.3 before Update 2 Siemens SIMATIC PCS 7 versions 7.1 through 8.1 Siemens TIA Portal version 13 before Update 6

Description The issue allows remote attackers to execute arbitrary code via crafted packets.

Recommendations For Siemens SIMATIC WinCC versions 7.0 through 7.3 before Update 2, update to a version that includes Update 2 or later. For Siemens SIMATIC PCS 7 versions 7.1 through 8.1, apply the necessary updates or patches to secure the system. For Siemens TIA Portal version 13 before Update 6, update to Update 6 or a later version to resolve the issue.

Correção

RCE

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2014-8551

Produtos afetados

Simatic Pcs 7

Simatic Wincc

Tia Portal

Referências · 3

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8551 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-8551 · Nota de Segurança
• http://siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-134508.pdf · Aviso do Fabricante