PT-2018-2167 · Siemens · Simatic It Lms+2

Published 2018-11-13 · Updated 2019-10-09 · CVE-2018-13804

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SIMATIC IT LMS versions all SIMATIC IT Production Suite versions prior to V7.1 Upd3 SIMATIC IT UA Discrete Manufacturing versions prior to V1.2 SIMATIC IT UA Discrete Manufacturing version V1.2 SIMATIC IT UA Discrete Manufacturing version V1.3 SIMATIC IT UA Discrete Manufacturing version V2.3 SIMATIC IT UA Discrete Manufacturing version V2.4

Description The issue is related to weaknesses in the authentication mechanisms of the software. An attacker with network access could bypass application-level authentication. To exploit this, an attacker must have network access to the installation and a valid username, but no user privileges or interaction are required. This could compromise the confidentiality, integrity, and availability of the system. There are no known public exploitations of this issue at the time of reporting.

Recommendations For SIMATIC IT LMS, update to a version that addresses the authentication mechanism weaknesses. For SIMATIC IT Production Suite versions prior to V7.1 Upd3, update to V7.1 Upd3 or later. For SIMATIC IT UA Discrete Manufacturing versions prior to V1.2, update to V1.2 or later. For SIMATIC IT UA Discrete Manufacturing version V1.2, consider disabling vulnerable authentication functions until a patch is available. For SIMATIC IT UA Discrete Manufacturing version V1.3, restrict access to vulnerable modules to minimize exploitation risk. For SIMATIC IT UA Discrete Manufacturing version V2.3, avoid using vulnerable parameters in affected API endpoints until the issue is resolved. For SIMATIC IT UA Discrete Manufacturing version V2.4, apply configuration changes to enhance authentication security.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2019-00120

CVE-2018-13804

Affected Products

Simatic It Lms

Simatic It Production Suite

Simatic It Ua Discrete Manufacturing

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2018-13804 · Security Note
• https://bdu.fstec.ru/vul/2019-00120 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-886615.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-13804 · Vendor Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-18-317-07 · Note
• http://securityfocus.com/bid/105924 · Note