Siemens SIMATIC WinCC Vulnerabilities (Update A)
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
beschreibt (5)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2014-4686US | medium6.8OT erhöht | — | ||
The Project administration application in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, has a hardcoded encryption key, which allows remote attackers to obt… | ||||
| CVE-2014-4685US | medium4.6 | — | ||
Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows local users to gain privileges by leveraging weak system-object access control. | ||||
| CVE-2014-4684US | medium6.0 | — | ||
The database server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a request to TCP port 1433. | ||||
| CVE-2014-4683US | medium4.9 | — | ||
The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a (1) HTTP or (2) HTTPS re… | ||||
| CVE-2014-4682US | medium5.0 | — | ||
The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote attackers to obtain sensitive information via an HTTP request. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-14-205-02A JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-14-205-02A - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (10)
- MitigationSIMATIC PCS7 (as WinCC is incorporated)
Additional information about SIMATIC WinCC V7.3 is available at the following location (http://support.automation.siemens.com/WW/view/en/97493192)
http://support.automation.siemens.com/WW/view/en/97493192 - MitigationSIMATIC PCS7 (as WinCC is incorporated)
Additional information about SIMATIC WinCC V7.3 is available at the following location (http://support.automation.siemens.com/WW/view/en/97493192)
http://support.automation.siemens.com/WW/view/en/97493192 - MitigationSIMATIC PCS7 (as WinCC is incorporated)
Additional information about SIMATIC WinCC V7.3 is available at the following location (http://support.automation.siemens.com/WW/view/en/97493192)
http://support.automation.siemens.com/WW/view/en/97493192 - MitigationSIMATIC PCS7 (as WinCC is incorporated)
Additional information about SIMATIC WinCC V7.3 is available at the following location (http://support.automation.siemens.com/WW/view/en/97493192)
http://support.automation.siemens.com/WW/view/en/97493192 - MitigationSIMATIC PCS7 (as WinCC is incorporated)
Additional information about SIMATIC WinCC V7.3 is available at the following location (http://support.automation.siemens.com/WW/view/en/97493192)
http://support.automation.siemens.com/WW/view/en/97493192 - MitigationSIMATIC WinCC
Additional information about SIMATIC WinCC V7.3 is available at the following location (http://support.automation.siemens.com/WW/view/en/97493192)
http://support.automation.siemens.com/WW/view/en/97493192 - MitigationSIMATIC WinCC
Additional information about SIMATIC WinCC V7.3 is available at the following location (http://support.automation.siemens.com/WW/view/en/97493192)
http://support.automation.siemens.com/WW/view/en/97493192 - MitigationSIMATIC WinCC
Additional information about SIMATIC WinCC V7.3 is available at the following location (http://support.automation.siemens.com/WW/view/en/97493192)
http://support.automation.siemens.com/WW/view/en/97493192 - MitigationSIMATIC WinCC
Additional information about SIMATIC WinCC V7.3 is available at the following location (http://support.automation.siemens.com/WW/view/en/97493192)
http://support.automation.siemens.com/WW/view/en/97493192 - MitigationSIMATIC WinCC
Additional information about SIMATIC WinCC V7.3 is available at the following location (http://support.automation.siemens.com/WW/view/en/97493192)
http://support.automation.siemens.com/WW/view/en/97493192
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan