SB2014121901 - Two vulnerabilities in Siemens SIMATIC WinCC

Description

This security bulletin contains information about 2 secuirty vulnerabilities.

1) Improper input validation (CVE-ID: CVE-2014-8551)

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to improper input validation when processing packets sent to the WinCC server. A remote unauthenticated attacker can send a specially crafted packet and execute arbitrary code on the target system.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

Note: this vulnerability has been exploited in targeted attacks.

2) Information disclosure (CVE-ID: CVE-2014-8552)

The vulnerability allows a remote attacker to view arbitrary files on the system.

The vulnerability exists due to improper input validation when processing packets sent to the WinCC server. A remote unauthenticated attacker can send a specially crafted packet and view contents of arbitrary files on the target system.

Successful exploitation of the vulnerability may allow an attacker to gain access to potentially sensitive information.

Remediation

Install update from vendor's website.

References

• https://ics-cert.us-cert.gov/advisories/ICSA-14-329-02D
• http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-134508.pdf