PT-2018-10583 · Siemens · Wincc+1

Published 2018-08-07 · Updated 2019-10-09 · CVE-2018-11454

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) versions V10 through V12 SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) version V13 through V13 SP2 Update 1 SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) version V14 through V14 SP1 Update 5 SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) version V15 through V15 Update 1

Description A vulnerability has been identified due to improper file permissions in the default installation of TIA Portal. This may allow an attacker with local file system access to manipulate resources, which can then be transferred to devices and executed by a different user. The attacker does not require special privileges, but the victim must transfer the manipulated files to a device. The execution occurs on the target device rather than the PG device.

Recommendations For versions V10 through V12, update to a version later than V12. For version V13, update to V13 SP2 Update 2 or later. For version V14, update to V14 SP1 Update 6 or later. For version V15, update to V15 Update 2 or later.

Fix

Incorrect Permission

Incorrect Default Permissions

Weakness Enumeration

CWE-732

CWE-276

Related Identifiers

CVE-2018-11454

Affected Products

Simatic Step 7

Wincc

References · 4

• https://osv.dev/vulnerability/CVE-2018-11454 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-11454 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-979106.pdf · Vendor Advisory
• http://securityfocus.com/bid/105115 · Note