Siemens SIMATIC WinCC Vulnerabilities (Update A)
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-4686US | medium6.8OT elevated | — | ||
The Project administration application in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, has a hardcoded encryption key, which allows remote attackers to obt… | ||||
| CVE-2014-4685US | medium4.6 | — | ||
Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows local users to gain privileges by leveraging weak system-object access control. | ||||
| CVE-2014-4684US | medium6.0 | — | ||
The database server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a request to TCP port 1433. | ||||
| CVE-2014-4683US | medium4.9 | — | ||
The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a (1) HTTP or (2) HTTPS re… | ||||
| CVE-2014-4682US | medium5.0 | — | ||
The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote attackers to obtain sensitive information via an HTTP request. | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-14-205-02A JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-14-205-02A - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (10)
- MitigationSIMATIC PCS7 (as WinCC is incorporated)
Additional information about SIMATIC WinCC V7.3 is available at the following location (http://support.automation.siemens.com/WW/view/en/97493192)
http://support.automation.siemens.com/WW/view/en/97493192 - MitigationSIMATIC PCS7 (as WinCC is incorporated)
Additional information about SIMATIC WinCC V7.3 is available at the following location (http://support.automation.siemens.com/WW/view/en/97493192)
http://support.automation.siemens.com/WW/view/en/97493192 - MitigationSIMATIC PCS7 (as WinCC is incorporated)
Additional information about SIMATIC WinCC V7.3 is available at the following location (http://support.automation.siemens.com/WW/view/en/97493192)
http://support.automation.siemens.com/WW/view/en/97493192 - MitigationSIMATIC PCS7 (as WinCC is incorporated)
Additional information about SIMATIC WinCC V7.3 is available at the following location (http://support.automation.siemens.com/WW/view/en/97493192)
http://support.automation.siemens.com/WW/view/en/97493192 - MitigationSIMATIC PCS7 (as WinCC is incorporated)
Additional information about SIMATIC WinCC V7.3 is available at the following location (http://support.automation.siemens.com/WW/view/en/97493192)
http://support.automation.siemens.com/WW/view/en/97493192 - MitigationSIMATIC WinCC
Additional information about SIMATIC WinCC V7.3 is available at the following location (http://support.automation.siemens.com/WW/view/en/97493192)
http://support.automation.siemens.com/WW/view/en/97493192 - MitigationSIMATIC WinCC
Additional information about SIMATIC WinCC V7.3 is available at the following location (http://support.automation.siemens.com/WW/view/en/97493192)
http://support.automation.siemens.com/WW/view/en/97493192 - MitigationSIMATIC WinCC
Additional information about SIMATIC WinCC V7.3 is available at the following location (http://support.automation.siemens.com/WW/view/en/97493192)
http://support.automation.siemens.com/WW/view/en/97493192 - MitigationSIMATIC WinCC
Additional information about SIMATIC WinCC V7.3 is available at the following location (http://support.automation.siemens.com/WW/view/en/97493192)
http://support.automation.siemens.com/WW/view/en/97493192 - MitigationSIMATIC WinCC
Additional information about SIMATIC WinCC V7.3 is available at the following location (http://support.automation.siemens.com/WW/view/en/97493192)
http://support.automation.siemens.com/WW/view/en/97493192
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan