PT-2012-1016 · Siemens · Simatic Wincc

Aleksandr Tlyapov · Published 2012-12-23 · Updated 2014-07-25 · CVE-2014-4682

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC versions prior to 7.3

Description The issue is related to an error that occurs when processing a specially crafted HTTP packet, allowing an unauthenticated attacker to gain access to confidential information by sending a specially crafted HTTP request to ports 80/tcp and 443/tcp. This can be achieved through the WebNavigator server, which allows remote attackers to obtain sensitive information via an HTTP request.

Recommendations For versions prior to 7.3, update to version 7.3 or later to resolve the issue. As a temporary workaround, consider restricting access to ports 80/tcp and 443/tcp to minimize the risk of exploitation.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2014-00405

CVE-2014-4682

Affected Products

Simatic Wincc

References · 10

• http://siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-214365.pdf · Vendor Advisory
• https://bdu.fstec.ru/vul/2014-00405 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=2014-4682 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2014-4682 · Security Note
• http://securityfocus.com/bid/68876 · Note
• http://siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-214365.pdf%20http://securitylab.ru/lab/PT-2014-12 · Note
• http://ics-cert.us-cert.gov//advisories/ICSA-14-205-02 · Note
• http://secunia.com/advisories/60392 · Note
• http://secunia.com/advisories/60388 · Note
• http://osvdb.org/show/osvdb/109485 · Note