PT-2017-12675 · Siemens · Sicam Rtus Sm-2556 Com Modules

Publicado 2017-11-15 · Atualizado 2017-11-30 · CVE-2017-12737

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi00

Description An issue was discovered that could allow unauthenticated remote attackers to obtain sensitive device information over the network through the integrated web server on port 80/tcp.

Recommendations For Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi00, restrict access to the integrated web server on port 80/tcp to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-12737

Produtos afetados

Sicam Rtus Sm-2556 Com Modules

Referências · 4

• http://securityfocus.com/bid/101884 · Nota
• https://siemens.com/cert/pool/cert/siemens_security_advisory_ssa-164516.pdf · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-12737 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-12737 · Nota de Segurança