Siemens Simatic HMI Authentication Vulnerabilities
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2011-4509US | high10.0OT erhöht | — | ||
The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11… | ||||
| CVE-2011-4508US | high9.3 | — | ||
The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panel… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-11-356-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-11-356-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (6)
- MitigationMultiple SIMATIC Panels
Product documentation has been updated to tell the user how to set a proper password during initial setup to remove the risk of the default password vulnerability.
- MitigationMultiple SIMATIC Panels
Product documentation has been updated to tell the user how to set a proper password during initial setup to remove the risk of the default password vulnerability.
- MitigationSIMATIC WinCC Runtime Advanced
Product documentation has been updated to tell the user how to set a proper password during initial setup to remove the risk of the default password vulnerability.
- MitigationSIMATIC WinCC Runtime Advanced
Product documentation has been updated to tell the user how to set a proper password during initial setup to remove the risk of the default password vulnerability.
- MitigationSIMATIC WinCC flexible RT
Product documentation has been updated to tell the user how to set a proper password during initial setup to remove the risk of the default password vulnerability.
- MitigationSIMATIC WinCC flexible RT
Product documentation has been updated to tell the user how to set a proper password during initial setup to remove the risk of the default password vulnerability.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan