Siemens SIMATIC STEP 7 TIA Portal Vulnerabilities
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2015-1356US | medium4.4 | — | ||
Siemens SIMATIC STEP 7 (TIA Portal) before 13 SP1 determines a user's privileges on the basis of project-file fields that lack integrity protection, which allows remote attackers t… | ||||
| CVE-2015-1355US | low2.1 | — | ||
Siemens SIMATIC STEP 7 (TIA Portal) before 13 SP1 uses a weak password-hash algorithm, which makes it easier for local users to determine cleartext passwords by reading a project f… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-15-048-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-15-048-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (2)
- MitigationSIMATIC STEP 7 TIA Portal
For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-234789 at the following location: http://www.siemens.com/cert/advisories
- MitigationSIMATIC STEP 7 TIA Portal
For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-234789 at the following location: http://www.siemens.com/cert/advisories
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan