PT-2019-2107 · Siemens · Simatic Hmi Classic Devices+6

Published 2019-05-14 · Updated 2019-05-22 · CVE-2019-6576

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SIMATIC HMI Comfort Panels 4" - 22" versions prior to V15.1 Update 1 SIMATIC HMI Comfort Outdoor Panels 7" & 15" versions prior to V15.1 Update 1 SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F versions prior to V15.1 Update 1 SIMATIC WinCC Runtime Advanced versions prior to V15.1 Update 1 SIMATIC WinCC Runtime Professional versions prior to V15.1 Update 1 SIMATIC WinCC (TIA Portal) versions prior to V15.1 Update 1 SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel) versions prior to V15.1 Update 1

Description The issue is related to errors in the use of cryptography in the software of SIMATIC devices. An attacker with network access to the affected devices could potentially obtain a TLS session key by observing TLS traffic between a legitimate user and the device. This could impact the confidentiality of the communication between the affected device and a legitimate user. At the time of advisory publication, no public exploitation of the security issue was known.

Recommendations For SIMATIC HMI Comfort Panels 4" - 22" versions prior to V15.1 Update 1, update to V15.1 Update 1 or later. For SIMATIC HMI Comfort Outdoor Panels 7" & 15" versions prior to V15.1 Update 1, update to V15.1 Update 1 or later. For SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F versions prior to V15.1 Update 1, update to V15.1 Update 1 or later. For SIMATIC WinCC Runtime Advanced versions prior to V15.1 Update 1, update to V15.1 Update 1 or later. For SIMATIC WinCC Runtime Professional versions prior to V15.1 Update 1, update to V15.1 Update 1 or later. For SIMATIC WinCC (TIA Portal) versions prior to V15.1 Update 1, update to V15.1 Update 1 or later. For SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel) versions prior to V15.1 Update 1, update to V15.1 Update 1 or later.

Fix

Weakness Enumeration

CWE-310

Related Identifiers

BDU:2019-01863

CVE-2019-6576

Affected Products

Simatic Hmi Classic Devices

Simatic Hmi Comfort Outdoor Panels

Simatic Hmi Comfort Panels

Simatic Hmi Ktp Mobile Panels

Simatic Wincc

Simatic Wincc Runtime Advanced

Simatic Wincc Runtime Professional

References · 7

• https://cert-portal.siemens.com/productcert/pdf/ssa-804486.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-6576 · Security Note
• https://osv.dev/vulnerability/CVE-2019-6576 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-01863 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-6576 · Security Note
• https://us-cert.gov/ics/advisories/ICSA-19-134-09 · Note
• http://securityfocus.com/bid/108412 · Note