CVSS: 7.8EPSS: 0%CPEs: 13EXPL: 0CVE-2018-11453
https://notcve.org/view.php?id=CVE-2018-11453
A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12 (All versions), SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V13 (All versions < V13 SP2 Update 2), SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V14 (All versions < V14 SP1 Update 6), SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V15 (All versions < V15 Update 2). Improper file permissions in the default installation of TIA Portal may allow an attacker with local file system access to insert specially crafted files which may prevent TIA Portal startup (Denial-of-Service) or lead to local code execution. No special privileges are required, but the victim needs to attempt to start TIA Portal after the manipulation. Se ha identificado una vulnerabilidad en SIMATIC STEP 7 (TIA Portal) y WinCC (TIA Portal) V10, V11, V12 (todas las versiones); SIMATIC STEP 7 (TIA Portal) y WinCC (TIA Portal) V13 (todas las versiones anteriores a la V13 SP2 Update 2), SIMATIC STEP 7 (TIA Portal) y WinCC (TIA Portal) V14 (todas las versiones anteriores a la V14 SP1 Update 6) y SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V15 (todas las versiones anteriores a la V15 Update 2). Los permisos de archivo incorrectos en la instalación por defecto de TIA Portal podría permitir que un atacante con acceso al sistema de archivos local inserte archivos especialmente manipulados que podrían evitar el arranque de TIA Portal (denegación de servicio) o conducir a la ejecución de código local. • http://www.securityfocus.com/bid/105115 https://cert-portal.siemens.com/productcert/pdf/ssa-979106.pdf • CWE-276: Incorrect Default Permissions CWE-732: Incorrect Permission Assignment for Critical Resource •
CVSS: 7.5EPSS: 0%CPEs: 48EXPL: 0CVE-2018-4832
https://notcve.org/view.php?id=CVE-2018-4832
A vulnerability has been identified in OpenPCS 7 V7.1 and earlier (All versions), OpenPCS 7 V8.0 (All versions), OpenPCS 7 V8.1 (All versions < V8.1 Upd5), OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions < V9.0 Upd1), SIMATIC BATCH V7.1 and earlier (All versions), SIMATIC BATCH V8.0 (All versions < V8.0 SP1 Upd21), SIMATIC BATCH V8.1 (All versions < V8.1 SP1 Upd16), SIMATIC BATCH V8.2 (All versions < V8.2 Upd10), SIMATIC BATCH V9.0 (All versions < V9.0 SP1), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions < 15 SP1), SIMATIC PCS 7 V7.1 and earlier (All versions), SIMATIC PCS 7 V8.0 (All versions), SIMATIC PCS 7 V8.1 (All versions), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP1), SIMATIC Route Control V7.1 and earlier (All versions), SIMATIC Route Control V8.0 (All versions), SIMATIC Route Control V8.1 (All versions), SIMATIC Route Control V8.2 (All versions), SIMATIC Route Control V9.0 (All versions < V9.0 Upd1), SIMATIC WinCC Runtime Professional V13 (All versions < V13 SP2 Upd2), SIMATIC WinCC Runtime Professional V14 (All versions < V14 SP1 Upd5), SIMATIC WinCC V7.2 and earlier (All versions < WinCC 7.2 Upd 15), SIMATIC WinCC V7.3 (All versions < WinCC 7.3 Upd 16), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Upd 4), SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). Specially crafted messages sent to the RPC service of the affected products could cause a Denial-of-Service condition on the remote and local communication functionality of the affected products. A reboot of the system is required to recover the remote and local communication functionality. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known. • http://packetstormsecurity.com/files/155665/Siemens-Security-Advisory-SPPA-T3000-Code-Execution.html https://cert-portal.siemens.com/productcert/pdf/ssa-348629.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf • CWE-20: Improper Input Validation •
CVSS: 4.6EPSS: 0%CPEs: 1EXPL: 0CVE-2018-4847
https://notcve.org/view.php?id=CVE-2018-4847
A vulnerability has been identified in SIMATIC WinCC OA Operator iOS App (All versions < V1.4). Insufficient protection of sensitive information (e.g. session key for accessing server) in Siemens WinCC OA Operator iOS app could allow an attacker with physical access to the mobile device to read unencrypted data from the app's directory. Siemens provides mitigations to resolve the security issue. Se ha identificado una vulnerabilidad en SIMATIC WinCC OA Operator iOS App (todas las versiones anteriores a la V1.4). La protección insuficiente de información sensible (por ejemplo, la clave de sesión para acceder al servidor) en la aplicación para iOS de Siemens WinCC OA Operator podría permitir que un atacante con acceso físico al dispositivo móvil lea datos no cifrados del directorio de la aplicación. • http://www.securityfocus.com/bid/103941 https://cert-portal.siemens.com/productcert/pdf/ssa-597741.pdf • CWE-311: Missing Encryption of Sensitive Data CWE-538: Insertion of Sensitive Information into Externally-Accessible File or Directory •
CVSS: 6.7EPSS: 0%CPEs: 2EXPL: 0CVE-2018-4844
https://notcve.org/view.php?id=CVE-2018-4844
A vulnerability has been identified in SIMATIC WinCC OA UI for Android (All versions < V3.15.10), SIMATIC WinCC OA UI for iOS (All versions < V3.15.10). Insufficient limitation of CONTROL script capabilities could allow read and write access from one HMI project cache folder to other HMI project cache folders within the app's sandbox on the same mobile device. This includes HMI project cache folders of other configured WinCC OA servers. The security vulnerability could be exploited by an attacker who tricks an app user to connect to an attacker-controlled WinCC OA server. Successful exploitation requires user interaction and read/write access to the app's folder on a mobile device. • http://www.securityfocus.com/bid/103475 https://cert-portal.siemens.com/productcert/pdf/ssa-822928.pdf https://ics-cert.us-cert.gov/advisories/ICSA-18-081-01 • CWE-269: Improper Privilege Management CWE-284: Improper Access Control •
CVSS: 4.9EPSS: 0%CPEs: 3EXPL: 0CVE-2017-14023
https://notcve.org/view.php?id=CVE-2017-14023
An Improper Input Validation issue was discovered in Siemens SIMATIC PCS 7 V8.1 prior to V8.1 SP1 with WinCC V7.3 Upd 13, and V8.2 all versions. The improper input validation vulnerability has been identified, which may allow an authenticated remote attacker who is a member of the administrators group to crash services by sending specially crafted messages to the DCOM interface. Se ha descubierto un problema de validación incorrecta de entradas en Siemens SIMATIC PCS 7 V8.1 en versiones anteriores a V8.1 SP1 con WinCC V7.3 Upd 13 y V8.2 en todas las versiones. Se ha identificado la vulnerabilidad de validación incorrecta de entradas, que podría permitir que un atacante remoto autenticado que sea miembro del grupo de administradores provoque el cierre inesperado de servicios mediante el envío de mensajes especialmente manipulados a la interfaz DCOM. • http://www.securityfocus.com/bid/101680 http://www.securitytracker.com/id/1039729 https://ics-cert.us-cert.gov/advisories/ICSA-17-306-01 • CWE-20: Improper Input Validation •