Siemens WinCC TIA Portal Vulnerabilities
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2013-4912US | medium5.8 | — | ||
Open redirect vulnerability in Siemens WinCC (TIA Portal) 11 and 12 before 12 SP1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks by l… | ||||
| CVE-2013-4911US | medium6.8 | — | ||
Cross-site request forgery (CSRF) vulnerability in Siemens WinCC (TIA Portal) 11 and 12 before 12 SP1 allows remote attackers to hijack the authentication of unspecified victims by… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-13-213-02 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-13-213-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (4)
- MitigationWinCC (TIA Portal) V11
Siemens has produced a software update that resolves these vulnerabilities. The update can be applied to all versions of WinCC TIA Portal. Siemens recommends that asset owners and operators contact Siemens customer support to acquire the update. Siemens update information is located here: (http://support.automation.siemens.com/WW/view/en/73947391)
http://support.automation.siemens.com/WW/view/en/73947391 - MitigationWinCC (TIA Portal) V11
Siemens has produced a software update that resolves these vulnerabilities. The update can be applied to all versions of WinCC TIA Portal. Siemens recommends that asset owners and operators contact Siemens customer support to acquire the update. Siemens update information is located here: (http://support.automation.siemens.com/WW/view/en/73947391)
http://support.automation.siemens.com/WW/view/en/73947391 - MitigationWinCC (TIA Portal) V12
Siemens has produced a software update that resolves these vulnerabilities. The update can be applied to all versions of WinCC TIA Portal. Siemens recommends that asset owners and operators contact Siemens customer support to acquire the update. Siemens update information is located here: (http://support.automation.siemens.com/WW/view/en/73947391)
http://support.automation.siemens.com/WW/view/en/73947391 - MitigationWinCC (TIA Portal) V12
Siemens has produced a software update that resolves these vulnerabilities. The update can be applied to all versions of WinCC TIA Portal. Siemens recommends that asset owners and operators contact Siemens customer support to acquire the update. Siemens update information is located here: (http://support.automation.siemens.com/WW/view/en/73947391)
http://support.automation.siemens.com/WW/view/en/73947391
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan