Siemens SIMATIC STEP 7 TIA Portal Vulnerabilities
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2015-1356US | medium4.4 | — | ||
Siemens SIMATIC STEP 7 (TIA Portal) before 13 SP1 determines a user's privileges on the basis of project-file fields that lack integrity protection, which allows remote attackers t… | ||||
| CVE-2015-1355US | low2.1 | — | ||
Siemens SIMATIC STEP 7 (TIA Portal) before 13 SP1 uses a weak password-hash algorithm, which makes it easier for local users to determine cleartext passwords by reading a project f… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-15-048-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-15-048-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (2)
- MitigationSIMATIC STEP 7 TIA Portal
For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-234789 at the following location: http://www.siemens.com/cert/advisories
- MitigationSIMATIC STEP 7 TIA Portal
For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-234789 at the following location: http://www.siemens.com/cert/advisories
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan