PT-2013-1038 · Siemens · Simatic Wincc

Aleksandr Tlyapov + 1 · Published 2013-04-16 · Updated 2014-07-25 · CVE-2014-4686

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC versions prior to 7.3

Description The issue concerns a hardcoded encryption key in the Project administration application. This allows remote attackers to obtain sensitive information by extracting the key from another product installation and then using it to sniff network traffic on TCP port 1030. The vulnerability can be exploited to elevate privileges in the WinCC Project Administration application, given that an attacker can intercept data transmitted by an authorized user over the network through port 1030/tcp.

Recommendations For versions prior to 7.3, update to version 7.3 or later to resolve the issue. As a temporary workaround, consider restricting access to TCP port 1030 to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-321

Related Identifiers

BDU:2014-00409

CVE-2014-4686

Affected Products

Simatic Wincc

References · 9

• https://bdu.fstec.ru/vul/2014-00409 · Security Note
• http://siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-214365.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-4686 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=2014-4686 · Security Note
• http://securityfocus.com/bid/68875 · Note
• http://osvdb.org/show/osvdb/109481 · Note
• http://ics-cert.us-cert.gov//advisories/ICSA-14-205-02%20http://siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-214365.pdf%20http://securitylab.ru/lab/PT-2014-16 · Note
• http://secunia.com/advisories/60392 · Note
• http://secunia.com/advisories/60388 · Note