Vulnerability in Siemens Wincc
CVE-2015-1358
The remote-management module in the (1) Multi Panels, (2) Comfort Panels, and (3) RT Advanced functionality in Siemens SIMATIC WinCC (TIA Portal) before 13 SP1 and in the (4) panels and (5) runtime functionality in SIMATIC WinCC flexible before 2008 SP3 Up7 does not properly encrypt credentials in transit, which makes it easier for remote attackers to determine cleartext credentials by sniffing the network and conducting a decryption attack.
Vulnerability class: POODLE (CVE-2014-3566)
Published · last modified .
CVSS v2 metric
CVSS v2 base score 5.0 (Medium). Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.027 (85.7th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 86th percentile — 85.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.027 · newest: 0.027 · change: 0.000
Affected products
- Siemens Wincc — versions 13.0
Weakness classification (CWE)
References
- www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_s… (Vendor Advisory)
- ics-cert.us-cert.gov/advisories/ICSA-16-161-02 (US Government Resource)
- www.securityfocus.com/bid/72625 (vdb-entry)
- www.securitytracker.com/id/1036090 (vdb-entry)
- www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-526760.pdf