cnvd - cnvd-2018-25291

cnvd-2018-25291

Vulnerability from cnvd

Title: Siemens SIMATIC STEP 7信息泄露漏洞

Description:

Siemens SIMATIC STEP 7（TIA Portal）是德国西门子（Siemens）公司的一套用于SIMATIC控制器的编程软件。该软件提供PLC编程、设计选件包和先进的驱动器技术等。

Siemens SIMATIC STEP 7（TIA Portal）15.1之前版本中存在安全漏洞，该漏洞源于程序未能保护存储的密码。攻击者可利用该漏洞访问项目文件并重新构建密码。

Severity: 低

Patch Name: Siemens SIMATIC STEP 7信息泄露漏洞的补丁

Patch Description:

Siemens SIMATIC STEP 7（TIA Portal）是德国西门子（Siemens）公司的一套用于SIMATIC控制器的编程软件。该软件提供PLC编程、设计选件包和先进的驱动器技术等。

Siemens SIMATIC STEP 7（TIA Portal）15.1之前版本中存在安全漏洞，该漏洞源于程序未能保护存储的密码。攻击者可利用该漏洞访问项目文件并重新构建密码。

目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

目前厂商已发布升级补丁以修复漏洞，补丁获取链接: https://support.industry.siemens.com/cs/us/en/view/109758794

Reference: https://ics-cert.us-cert.gov/advisories/ICSA-18-317-06

Impacted products

Name
Siemens SIMATIC STEP 7 (TIA Portal) <15.1

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-13811"
    }
  },
  "description": "Siemens SIMATIC STEP 7\uff08TIA Portal\uff09\u662f\u5fb7\u56fd\u897f\u95e8\u5b50\uff08Siemens\uff09\u516c\u53f8\u7684\u4e00\u5957\u7528\u4e8eSIMATIC\u63a7\u5236\u5668\u7684\u7f16\u7a0b\u8f6f\u4ef6\u3002\u8be5\u8f6f\u4ef6\u63d0\u4f9bPLC\u7f16\u7a0b\u3001\u8bbe\u8ba1\u9009\u4ef6\u5305\u548c\u5148\u8fdb\u7684\u9a71\u52a8\u5668\u6280\u672f\u7b49\u3002\n\nSiemens SIMATIC STEP 7\uff08TIA Portal\uff0915.1\u4e4b\u524d\u7248\u672c\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u4fdd\u62a4\u5b58\u50a8\u7684\u5bc6\u7801\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u8bbf\u95ee\u9879\u76ee\u6587\u4ef6\u5e76\u91cd\u65b0\u6784\u5efa\u5bc6\u7801\u3002",
  "discovererName": "unKnow",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5:\r\nhttps://support.industry.siemens.com/cs/us/en/view/109758794",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-25291",
  "openTime": "2018-12-13",
  "patchDescription": "Siemens SIMATIC STEP 7\uff08TIA Portal\uff09\u662f\u5fb7\u56fd\u897f\u95e8\u5b50\uff08Siemens\uff09\u516c\u53f8\u7684\u4e00\u5957\u7528\u4e8eSIMATIC\u63a7\u5236\u5668\u7684\u7f16\u7a0b\u8f6f\u4ef6\u3002\u8be5\u8f6f\u4ef6\u63d0\u4f9bPLC\u7f16\u7a0b\u3001\u8bbe\u8ba1\u9009\u4ef6\u5305\u548c\u5148\u8fdb\u7684\u9a71\u52a8\u5668\u6280\u672f\u7b49\u3002\r\n\r\nSiemens SIMATIC STEP 7\uff08TIA Portal\uff0915.1\u4e4b\u524d\u7248\u672c\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u4fdd\u62a4\u5b58\u50a8\u7684\u5bc6\u7801\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u8bbf\u95ee\u9879\u76ee\u6587\u4ef6\u5e76\u91cd\u65b0\u6784\u5efa\u5bc6\u7801\u3002 \r\n\r\n\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Siemens SIMATIC STEP 7\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Siemens SIMATIC STEP 7 (TIA Portal) \u003c15.1"
  },
  "referenceLink": "https://ics-cert.us-cert.gov/advisories/ICSA-18-317-06",
  "serverity": "\u4f4e",
  "submitTime": "2018-11-16",
  "title": "Siemens SIMATIC STEP 7\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e"
}

CVE-2018-13811 (GCVE-0-2018-13811)

Vulnerability from cvelistv5

Published

2018-12-13 16:00

Modified

2024-08-05 09:14

Severity ?

CWE

CWE-916 - Use of Password Hash With Insufficient Computational Effort

Summary

A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All Versions < V15.1). Password hashes with insufficient computational effort could allow an attacker to access to a project file and reconstruct passwords. The vulnerability could be exploited by an attacker with local access to the project file. No user interaction is required to exploit the vulnerability. The vulnerability could allow the attacker to obtain certain passwords from the project. At the time of advisory publication no public exploitation of this vulnerability was known.

References

▼	URL	Tags
	https://cert-portal.siemens.com/productcert/pdf/ssa-621493.pdf	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/105926	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	Siemens AG	SIMATIC STEP 7 (TIA Portal)	Version: SIMATIC STEP 7 (TIA Portal) : All Versions < V15.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T09:14:47.273Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-621493.pdf"
          },
          {
            "name": "105926",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/105926"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "SIMATIC STEP 7 (TIA Portal)",
          "vendor": "Siemens AG",
          "versions": [
            {
              "status": "affected",
              "version": "SIMATIC STEP 7 (TIA Portal) : All Versions \u003c V15.1"
            }
          ]
        }
      ],
      "datePublic": "2018-12-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All Versions \u003c V15.1). Password hashes with insufficient computational effort could allow an attacker to access to a project file and reconstruct passwords. The vulnerability could be exploited by an attacker with local access to the project file. No user interaction is required to exploit the vulnerability. The vulnerability could allow the attacker to obtain certain passwords from the project. At the time of advisory publication no public exploitation of this vulnerability was known."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-916",
              "description": "CWE-916: Use of Password Hash With Insufficient Computational Effort",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-12-14T10:57:02",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-621493.pdf"
        },
        {
          "name": "105926",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/105926"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "productcert@siemens.com",
          "ID": "CVE-2018-13811",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "SIMATIC STEP 7 (TIA Portal)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "SIMATIC STEP 7 (TIA Portal) : All Versions \u003c V15.1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Siemens AG"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All Versions \u003c V15.1). Password hashes with insufficient computational effort could allow an attacker to access to a project file and reconstruct passwords. The vulnerability could be exploited by an attacker with local access to the project file. No user interaction is required to exploit the vulnerability. The vulnerability could allow the attacker to obtain certain passwords from the project. At the time of advisory publication no public exploitation of this vulnerability was known."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-916: Use of Password Hash With Insufficient Computational Effort"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-621493.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-621493.pdf"
            },
            {
              "name": "105926",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/105926"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2018-13811",
    "datePublished": "2018-12-13T16:00:00",
    "dateReserved": "2018-07-10T00:00:00",
    "dateUpdated": "2024-08-05T09:14:47.273Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted