PT-2017-17382 · Siemens · Simatic Wincc+2

Publicado 2017-05-11 · Atualizado 2018-06-14 · CVE-2017-6867

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Média

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC versions 7.3 before Upd 11 Siemens SIMATIC WinCC versions 7.4 before SP1 Siemens SIMATIC WinCC Runtime Professional versions 13 before SP2 Siemens SIMATIC WinCC Runtime Professional versions 14 before SP1 Siemens SIMATIC WinCC (TIA Portal) Professional versions 13 before SP2 Siemens SIMATIC WinCC (TIA Portal) Professional versions 14 before SP1

Description A vulnerability was discovered that could allow an authenticated, remote attacker who is a member of the administrators group to crash services by sending specially crafted messages to the DCOM interface.

Recommendations For Siemens SIMATIC WinCC versions 7.3 before Upd 11, update to Upd 11 or later. For Siemens SIMATIC WinCC versions 7.4 before SP1, update to SP1 or later. For Siemens SIMATIC WinCC Runtime Professional versions 13 before SP2, update to SP2 or later. For Siemens SIMATIC WinCC Runtime Professional versions 14 before SP1, update to SP1 or later. For Siemens SIMATIC WinCC (TIA Portal) Professional versions 13 before SP2, update to SP2 or later. For Siemens SIMATIC WinCC (TIA Portal) Professional versions 14 before SP1, update to SP1 or later.

Correção

RCE

Memory Corruption

Enumeração de Fraquezas

CWE-20

CWE-787

Identificadores relacionados

CVE-2017-6867

Produtos afetados

Simatic Wincc

Simatic Wincc (Tia Portal) Professional

Simatic Wincc Runtime Professional

Referências · 5

• https://osv.dev/vulnerability/CVE-2017-6867 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-6867 · Nota de Segurança
• https://siemens.com/cert/pool/cert/siemens_security_advisory_ssa-156872.pdf · Aviso do Fabricante
• https://cert-portal.siemens.com/productcert/pdf/ssa-523365.pdf · Nota
• http://securityfocus.com/bid/98368 · Nota