PT-2017-17384 · Siemens · Siemens Viewport For Web Office Portal

Published 2017-08-08 · Updated 2019-10-09 · CVE-2017-6869

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Siemens ViewPort for Web Office Portal versions prior to revision 1453

Description A vulnerability was discovered that could allow an unauthenticated remote user to upload arbitrary code and execute it with the permissions of the operating-system user running the web server by sending specially crafted network packets to port 443/TCP or port 80/TCP.

Recommendations For versions prior to revision 1453, update to revision 1453 or later to resolve the issue. As a temporary workaround, consider restricting access to ports 443/TCP and 80/TCP to minimize the risk of exploitation.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2017-6869

Affected Products

Siemens Viewport For Web Office Portal

References · 3

• https://siemens.com/cert/pool/cert/siemens_security_advisory_ssa-545214.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-6869 · Security Note
• http://securityfocus.com/bid/99343 · Note