Siemens Simatic HMI Authentication Vulnerabilities
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2011-4509US | high10.0OT elevated | — | ||
The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11… | ||||
| CVE-2011-4508US | high9.3 | — | ||
The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panel… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-11-356-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-11-356-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (6)
- MitigationMultiple SIMATIC Panels
Product documentation has been updated to tell the user how to set a proper password during initial setup to remove the risk of the default password vulnerability.
- MitigationMultiple SIMATIC Panels
Product documentation has been updated to tell the user how to set a proper password during initial setup to remove the risk of the default password vulnerability.
- MitigationSIMATIC WinCC Runtime Advanced
Product documentation has been updated to tell the user how to set a proper password during initial setup to remove the risk of the default password vulnerability.
- MitigationSIMATIC WinCC Runtime Advanced
Product documentation has been updated to tell the user how to set a proper password during initial setup to remove the risk of the default password vulnerability.
- MitigationSIMATIC WinCC flexible RT
Product documentation has been updated to tell the user how to set a proper password during initial setup to remove the risk of the default password vulnerability.
- MitigationSIMATIC WinCC flexible RT
Product documentation has been updated to tell the user how to set a proper password during initial setup to remove the risk of the default password vulnerability.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan