KLA10534 Sensitive information obtain vulnerabilities in Siemens SIMATIC STEP

Improper password store and other uncnown vulnerability were found in SIMATIC STEP 7. By exploiting these vulnerabilities malicious users can obtain sensitive information. These vulnerabilities can be exploited remotely via an unknown vectors.

Original advisories

Siemens advisory

Related products

SIMATIC-STEP

CVE list

CVE-2015-1602 warning

CVE-2015-1601 high

Solution

Install updates

Impacts

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

Affected Products

• Siemens SIMATIC STEP 7 12 all versionsSiemens SIMATIC STEP 7 13 versions earlier than 13 SP1 Upd1