cnvd - cnvd-2015-01296

CNVD-2015-01296

Vulnerability from cnvd - Published: 2015-02-26

Title

Siemens SIMATIC WinCC TIA Portal中间人信息泄露漏洞

Description

Siemens SIMATIC WinCC是监测控制和数据采集SCADA及人机界面HMI系统。 Siemens SIMATIC WinCC V13 SP1存在信息泄露漏洞，攻击者可以利用此漏洞通过中间人攻击获取敏感信息。

Severity

中

Patch Name

Siemens SIMATIC WinCC TIA Portal中间人信息泄露漏洞的补丁

Patch Description

Siemens SIMATIC WinCC是监测控制和数据采集SCADA及人机界面HMI系统。 Siemens SIMATIC WinCC V13 SP1存在信息泄露漏洞，攻击者可以利用此漏洞通过中间人攻击获取敏感信息。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

用户可以联系供应商获得补丁信息： https://support.industry.siemens.com/cs/document/58860033/update-for-wincc-flexible-2008-service-pack-3?dti=0&lc=en-WW

Reference

http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-543623.pdf http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-526760.pdf http://www.securityfocus.com/bid/72625

Impacted products

Name
Siemens SIMATIC WinCC TIA Portal V13 SP1

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "72625"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2015-1358"
    }
  },
  "description": "Siemens SIMATIC WinCC\u662f\u76d1\u6d4b\u63a7\u5236\u548c\u6570\u636e\u91c7\u96c6SCADA\u53ca\u4eba\u673a\u754c\u9762HMI\u7cfb\u7edf\u3002\r\n\r\nSiemens SIMATIC WinCC V13 SP1\u5b58\u5728\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u4ee5\u5229\u7528\u6b64\u6f0f\u6d1e\u901a\u8fc7\u4e2d\u95f4\u4eba\u653b\u51fb\u83b7\u53d6\u654f\u611f\u4fe1\u606f\u3002",
  "discovererName": "Gleb Gritsai, Roman Ilin, Aleksandr Tlyapov, and Sergey Gordeych",
  "formalWay": "\u7528\u6237\u53ef\u4ee5\u8054\u7cfb\u4f9b\u5e94\u5546\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttps://support.industry.siemens.com/cs/document/58860033/update-for-wincc-flexible-2008-service-pack-3?dti=0\u0026lc=en-WW",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2015-01296",
  "openTime": "2015-02-26",
  "patchDescription": "Siemens SIMATIC WinCC\u662f\u76d1\u6d4b\u63a7\u5236\u548c\u6570\u636e\u91c7\u96c6SCADA\u53ca\u4eba\u673a\u754c\u9762HMI\u7cfb\u7edf\u3002\r\n\r\nSiemens SIMATIC WinCC V13 SP1\u5b58\u5728\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u4ee5\u5229\u7528\u6b64\u6f0f\u6d1e\u901a\u8fc7\u4e2d\u95f4\u4eba\u653b\u51fb\u83b7\u53d6\u654f\u611f\u4fe1\u606f\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Siemens SIMATIC WinCC TIA Portal\u4e2d\u95f4\u4eba\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Siemens SIMATIC WinCC TIA Portal V13 SP1"
  },
  "referenceLink": "http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-543623.pdf\r\nhttp://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-526760.pdf\r\nhttp://www.securityfocus.com/bid/72625",
  "serverity": "\u4e2d",
  "submitTime": "2015-02-21",
  "title": "Siemens SIMATIC WinCC TIA Portal\u4e2d\u95f4\u4eba\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e"
}

CVE-2015-1358 (GCVE-0-2015-1358)

Vulnerability from cvelistv5 – Published: 2015-02-18 02:00 – Updated: 2024-08-06 04:40

Summary

The remote-management module in the (1) Multi Panels, (2) Comfort Panels, and (3) RT Advanced functionality in Siemens SIMATIC WinCC (TIA Portal) before 13 SP1 and in the (4) panels and (5) runtime functionality in SIMATIC WinCC flexible before 2008 SP3 Up7 does not properly encrypt credentials in transit, which makes it easier for remote attackers to determine cleartext credentials by sniffing the network and conducting a decryption attack.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://www.siemens.com/innovation/pool/de/forschu…	x_refsource_CONFIRM
	https://ics-cert.us-cert.gov/advisories/ICSA-16-161-02	x_refsource_MISC
	http://www.securityfocus.com/bid/72625	vdb-entryx_refsource_BID
	http://www.securitytracker.com/id/1036090	vdb-entryx_refsource_SECTRACK
	http://www.siemens.com/cert/pool/cert/siemens_sec…	x_refsource_CONFIRM

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T04:40:18.560Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-543623.pdf"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-161-02"
          },
          {
            "name": "72625",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/72625"
          },
          {
            "name": "1036090",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036090"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-526760.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-02-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The remote-management module in the (1) Multi Panels, (2) Comfort Panels, and (3) RT Advanced functionality in Siemens SIMATIC WinCC (TIA Portal) before 13 SP1 and in the (4) panels and (5) runtime functionality in SIMATIC WinCC flexible before 2008 SP3 Up7 does not properly encrypt credentials in transit, which makes it easier for remote attackers to determine cleartext credentials by sniffing the network and conducting a decryption attack."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-11-28T20:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-543623.pdf"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-161-02"
        },
        {
          "name": "72625",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/72625"
        },
        {
          "name": "1036090",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036090"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-526760.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-1358",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The remote-management module in the (1) Multi Panels, (2) Comfort Panels, and (3) RT Advanced functionality in Siemens SIMATIC WinCC (TIA Portal) before 13 SP1 and in the (4) panels and (5) runtime functionality in SIMATIC WinCC flexible before 2008 SP3 Up7 does not properly encrypt credentials in transit, which makes it easier for remote attackers to determine cleartext credentials by sniffing the network and conducting a decryption attack."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-543623.pdf",
              "refsource": "CONFIRM",
              "url": "http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-543623.pdf"
            },
            {
              "name": "https://ics-cert.us-cert.gov/advisories/ICSA-16-161-02",
              "refsource": "MISC",
              "url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-161-02"
            },
            {
              "name": "72625",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/72625"
            },
            {
              "name": "1036090",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1036090"
            },
            {
              "name": "http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-526760.pdf",
              "refsource": "CONFIRM",
              "url": "http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-526760.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-1358",
    "datePublished": "2015-02-18T02:00:00",
    "dateReserved": "2015-01-26T00:00:00",
    "dateUpdated": "2024-08-06T04:40:18.560Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2015-01296

CVE-2015-1358 (GCVE-0-2015-1358)

Tags

Sightings

Nomenclature