Vulnerability CVE-2014-4686

Vulnerability CVE-2014-4686

Published: 2014-07-24

Description:

The Project administration application in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, has a hardcoded encryption key, which allows remote attackers to obtain sensitive information by extracting this key from another product installation and then employing this key during the sniffing of network traffic on TCP port 1030.

See advisories in our WLB2 database:

	Topic	Author	Date
High	Siemens SIMATIC TIA Portal (Step 7/WinCC) fixes	SCADA StrangeLov...	17.02.2015

Type:

CWE-Other

CVSS2 => (AV:N/AC:M/Au:N/C:P/I:P/A:P)

CVSS Base Score	Impact Subscore	Exploitability Subscore
6.8/10	6.4/10	8.6/10

Exploit range	Attack complexity	Authentication
Remote	Medium	No required
Confidentiality impact	Integrity impact	Availability impact
Partial	Partial	Partial

Affected software
Siemens -> Simatic pcs7
Siemens -> Wincc

References:

http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-214365.pdf

Copyright 2024, cxsecurity.com