CVE-2014-4686

Related Files

Siemens SIMATIC WinCC (TIA Portal) V13 Privilege Escalation

Posted Feb 16, 2015

Authored by Siemens ProductCERT | Site siemens.com

The latest update for SIMATIC WinCC (TIA Portal) V13 fixes two vulnerabilities. The remote management module of WinCC (TIA Portal) Multi Panels and Comfort Panels, and WinCC RT Advanced transmits weakly protected credentials over the network. Attackers capturing network traffic of the remote management module could possibly reconstruct used passwords. A hard coded encryption key used in WinCC RT Professional could allow attackers to escalate their privileges if the application's network communication with an authenticated user was captured.

tags | advisory, remote, vulnerability

advisories | CVE-2014-4686, CVE-2015-1358

SHA-256 | 8eaaadac7bd62a1372b3f4832ed7853c5bfabaa509311247fc900d53d44cd1e6

Download | Favorite | View

Siemens SIMATIC WinCC Privilege Escalation

Posted Jul 29, 2014

Authored by Siemens ProductCERT | Site siemens.com

Siemens SIMATIC WinCC versions prior to 7.3 suffer from unauthenticated access, privilege escalation, and hard-coded encryption key vulnerabilities.

tags | advisory, vulnerability

advisories | CVE-2014-4682, CVE-2014-4683, CVE-2014-4684, CVE-2014-4685, CVE-2014-4686

SHA-256 | 7b2386094198c589bb175e6f6352b3527830abc474c16d1dbe09639309362020

Download | Favorite | View