Vulnerability in Siemens Wincc Tia Portal
CVE-2011-4515
Siemens WinCC (TIA Portal) 11 uses a reversible algorithm for storing HMI web-application passwords in world-readable and world-writable files, which allows local users to obtain sensitive information by leveraging (1) physical access or (2) Sm@rt Server access.
EPSS: 0.004 (30.8th percentile) — read the EPSS interpretation.
Affected products
- Siemens Wincc_tia_portal — versions 11.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cret@cert.org (US Government Resource, x_refsource_MISC)
- cret@cert.org (x_refsource_CONFIRM, Vendor Advisory)