PT-2018-2166 · Siemens · Simatic Step 7

Published 2018-11-13 · Updated 2019-10-09 · CVE-2018-13811

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SIMATIC STEP 7 (TIA Portal) versions prior to V15.1

Description A vulnerability has been identified that could allow an attacker to access a project file and reconstruct passwords due to password hashes with insufficient computational effort. The issue can be exploited by an attacker with local access to the project file, requiring no user interaction. This could enable the attacker to obtain certain passwords from the project. At the time of advisory publication, no public exploitation of this issue was known.

Recommendations For versions prior to V15.1, update to version V15.1 or later to resolve the issue. As a temporary workaround, consider restricting access to project files to minimize the risk of exploitation.

Fix

Information Disclosure

Weakness Enumeration

CWE-256

CWE-916

CWE-200

Related Identifiers

BDU:2019-00119

CVE-2018-13811

Affected Products

Simatic Step 7

References · 6

• https://bdu.fstec.ru/vul/2019-00119 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-13811 · Security Note
• https://osv.dev/vulnerability/CVE-2018-13811 · Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-621493.pdf · Vendor Advisory
• http://securityfocus.com/bid/105926 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-18-317-06%20%20%20https://cert-portal.siemens.com/productcert/pdf/ssa-621493.pdf · Note