Lucene search

HistoryFeb 26, 2015 - 12:00 a.m.

Siemens SIMATIC STEP 7 (TIA Portal) < 1300.100.2501.1 Multiple Vulnerabilities (SSA-315836)

2015-02-2600:00:00

www.tenable.com

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.001

Percentile

49.1%

JSON

The remote host is running a version of Siemens SIMATIC STEP 7 (TIA Portal) prior to version 13 Service Pack 1 Update 1. It is, therefore, affected by multiple vulnerabilities :

An unspecified man-in-the-middle vulnerability allows remote attackers to intercept or modify Siemens industrial communications. (CVE-2015-1601)
An unspecified password hashing flaw allows local attackers with read access to TIA project files to reconstruct protection-level and web server passwords.
(CVE-2015-1602)

Binary data scada_siemens_tia_multiple_vulnerabilities_SSA-315836.nbin

References

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1601

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1602

www.nessus.org/u?85f3a651

ics-cert.us-cert.gov/advisories/ICSA-15-050-01A

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.001

Percentile

49.1%

JSON

Related for SCADA_SIEMENS_TIA_MULTIPLE_VULNERABILITIES_SSA-315836.NBIN