PT-2019-2106 · Siemens · Simatic Hmi Classic Devices+6

Published 2019-05-14 · Updated 2020-10-06 · CVE-2019-6572

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions SIMATIC HMI Comfort Panels 4" - 22" versions prior to V15.1 Update 1 SIMATIC HMI Comfort Outdoor Panels 7" & 15" versions prior to V15.1 Update 1 SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F versions prior to V15.1 Update 1 SIMATIC WinCC Runtime Advanced versions prior to V15.1 Update 1 SIMATIC WinCC Runtime Professional versions prior to V15.1 Update 1 SIMATIC WinCC (TIA Portal) versions prior to V15.1 Update 1 SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel) versions prior to V15.1 Update 1

Description The issue is related to errors in permission management, allowing an attacker to gain read and write access to SNMP using a hardcoded community string. Successful exploitation requires network access to the affected device and no system privileges or user interaction. This could compromise the confidentiality and integrity of the affected system.

Recommendations For SIMATIC HMI Comfort Panels 4" - 22" versions prior to V15.1 Update 1, update to V15.1 Update 1 or later. For SIMATIC HMI Comfort Outdoor Panels 7" & 15" versions prior to V15.1 Update 1, update to V15.1 Update 1 or later. For SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F versions prior to V15.1 Update 1, update to V15.1 Update 1 or later. For SIMATIC WinCC Runtime Advanced versions prior to V15.1 Update 1, update to V15.1 Update 1 or later. For SIMATIC WinCC Runtime Professional versions prior to V15.1 Update 1, update to V15.1 Update 1 or later. For SIMATIC WinCC (TIA Portal) versions prior to V15.1 Update 1, update to V15.1 Update 1 or later. For SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel) versions prior to V15.1 Update 1, update to V15.1 Update 1 or later.

Fix

Using Hardcoded Credentials

Information Disclosure

Weakness Enumeration

CWE-798

CWE-200

CWE-264

Related Identifiers

BDU:2019-01862

CVE-2019-6572

Affected Products

Simatic Hmi Classic Devices

Simatic Hmi Comfort Outdoor Panels

Simatic Hmi Comfort Panels

Simatic Hmi Ktp Mobile Panels

Simatic Wincc

Simatic Wincc Runtime Advanced

Simatic Wincc Runtime Professional

References · 6

• https://bdu.fstec.ru/vul/2019-01862 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-804486.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-6572 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-6572 · Security Note
• http://securityfocus.com/bid/108412 · Note
• https://us-cert.gov/ics/advisories/ICSA-19-134-09 · Note