SSA-111512: Client-side Authentication in SIMATIC WinCC OA
SIMATIC WinCC OA implements client-side only authentication, when neither server-side authentication (SSA) nor Kerberos authentication is enabled. In this configuration, attackers could impersonate other users or exploit the client-server protocol without being authenticated. Siemens recommends to enable server-side authentication (SSA) or Kerberos authentication for all WinCC OA projects, as documented in the WinCC OA Security Guideline. In SIMATIC WinCC OA server-side authentication is available since V3.15 (and offered as the default configuration since V3.17). Additional information can be found at: https://cert-portal.siemens.com/productcert/news.html?id=21.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-33139US | critical9.8 | — | ||
A vulnerability has been identified in Cerberus DMS (All versions), Desigo CC (All versions), Desigo CC Compact (All versions), SIMATIC WinCC OA V3.16 (All versions in default conf… | ||||
references
External citations — patches, advisories, analysis.
remediations (3)
- FixedSIMATIC WinCC OA V3.16
Enable server-side authentication (SSA) or Kerberos authentication for your WinCC OA project
https://www.winccoa.com/downloads/detail/security-guideline-wincc-oa-v316-1.html - FixedSIMATIC WinCC OA V3.17
Ensure that server-side authentication (SSA) is enabled for your WinCC OA project (which is the default configuration); alternatively enable Kerberos authentication
https://www.winccoa.com/downloads/detail/security-guideline-wincc-oa-v317.html - FixedSIMATIC WinCC OA V3.18
Ensure that server-side authentication (SSA) is enabled for your WinCC OA project (which is the default configuration); alternatively enable Kerberos authentication
https://www.winccoa.com/downloads/detail/security-guideline-wincc-oa-v318.html
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan