Siemens WinCC TIA Portal Vulnerabilities
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2013-4912US | medium5.8 | — | ||
Open redirect vulnerability in Siemens WinCC (TIA Portal) 11 and 12 before 12 SP1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks by l… | ||||
| CVE-2013-4911US | medium6.8 | — | ||
Cross-site request forgery (CSRF) vulnerability in Siemens WinCC (TIA Portal) 11 and 12 before 12 SP1 allows remote attackers to hijack the authentication of unspecified victims by… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-13-213-02 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-13-213-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (4)
- MitigationWinCC (TIA Portal) V11
Siemens has produced a software update that resolves these vulnerabilities. The update can be applied to all versions of WinCC TIA Portal. Siemens recommends that asset owners and operators contact Siemens customer support to acquire the update. Siemens update information is located here: (http://support.automation.siemens.com/WW/view/en/73947391)
http://support.automation.siemens.com/WW/view/en/73947391 - MitigationWinCC (TIA Portal) V11
Siemens has produced a software update that resolves these vulnerabilities. The update can be applied to all versions of WinCC TIA Portal. Siemens recommends that asset owners and operators contact Siemens customer support to acquire the update. Siemens update information is located here: (http://support.automation.siemens.com/WW/view/en/73947391)
http://support.automation.siemens.com/WW/view/en/73947391 - MitigationWinCC (TIA Portal) V12
Siemens has produced a software update that resolves these vulnerabilities. The update can be applied to all versions of WinCC TIA Portal. Siemens recommends that asset owners and operators contact Siemens customer support to acquire the update. Siemens update information is located here: (http://support.automation.siemens.com/WW/view/en/73947391)
http://support.automation.siemens.com/WW/view/en/73947391 - MitigationWinCC (TIA Portal) V12
Siemens has produced a software update that resolves these vulnerabilities. The update can be applied to all versions of WinCC TIA Portal. Siemens recommends that asset owners and operators contact Siemens customer support to acquire the update. Siemens update information is located here: (http://support.automation.siemens.com/WW/view/en/73947391)
http://support.automation.siemens.com/WW/view/en/73947391
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan