Lucene search

MitreCVE-2013-4912

HistoryAug 01, 2013 - 1:32 p.m.

CVE-2013-4912

2013-08-0113:32:26

CWE-20

mitre

web.nvd.nist.gov

siemens

wincc

tia portal

open redirect vulnerability

phishing

nvd

cve-2013-4912

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.9

Confidence

Low

EPSS

0.004

Percentile

73.2%

JSON

Open redirect vulnerability in Siemens WinCC (TIA Portal) 11 and 12 before 12 SP1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks by leveraging improper configuration of SIMATIC HMI panels by the WinCC product.

Affected configurations

Nvd

Node

siemenswinccMatch11.0

siemenswinccMatch11.0sp1

siemenswinccMatch11.0sp2

siemenswinccMatch12.0

VendorProductVersionCPE
siemenswincc11.0cpe:2.3:a:siemens:wincc:11.0:*:*:*:*:*:*:*
siemenswincc11.0cpe:2.3:a:siemens:wincc:11.0:sp1:*:*:*:*:*:*
siemenswincc11.0cpe:2.3:a:siemens:wincc:11.0:sp2:*:*:*:*:*:*
siemenswincc12.0cpe:2.3:a:siemens:wincc:12.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
siemens	wincc	11.0	cpe:2.3:a:siemens:wincc:11.0:::::::*
siemens	wincc	11.0	cpe:2.3:a:siemens:wincc:11.0:sp1::::::
siemens	wincc	11.0	cpe:2.3:a:siemens:wincc:11.0:sp2::::::
siemens	wincc	12.0	cpe:2.3:a:siemens:wincc:12.0:::::::*

References

scadastrangelove.blogspot.com/2013/08/ssa-064884-wincctia-portal-fixes.html

secunia.com/advisories/54051

secunia.com/advisories/54252

www.securityfocus.com/bid/61535

www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-064884.pdf

exchange.xforce.ibmcloud.com/vulnerabilities/86100

ics-cert.us-cert.gov/advisories/ICSA-13-213-02

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.9

Confidence

Low

EPSS

0.004

Percentile

73.2%

JSON

Related for CVE-2013-4912