Lucene search
This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.OT_500121.NASLHistoryNov 08, 2019 - 12:00 a.m.
Siemens Simatic Exposure of Sensitive Information to an Unauthorized Actor
2019-11-0800:00:00
This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
10
0.001 Low
EPSS
Percentile
40.5%
A vulnerability has been identified in SIMATIC CP 343-1 Advanced (incl. SIPLUS NET variant) (All versions < V3.0.53), SIMATIC CP 443-1 Advanced (incl. SIPLUS NET variant) (All versions < V3.2.17), SIMATIC S7-300 PN/DP CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP CPU family (incl. SIPLUS variants) (All versions). The integrated web server delivers cookies without the “secure” flag. Modern browsers interpreting the flag would mitigate potential data leakage in case of clear text transmission.
File data ot_500121.nasl| Vendor | Product | Version | CPE |
|---|---|---|---|
| siemens | simatic_cp_343-1_firmware | - | cpe:2.3:o:siemens:simatic_cp_343-1_firmware:-:*:*:*:advanced:*:*:* |
| siemens | simatic_cp_343-1 | - | cpe:2.3:h:siemens:simatic_cp_343-1:-:*:*:*:*:*:*:* |
| siemens | simatic_s7_300_cpu_firmware | - | cpe:2.3:o:siemens:simatic_s7_300_cpu_firmware:-:*:*:*:*:*:*:* |
| siemens | simatic_s7_300_cpu | - | cpe:2.3:h:siemens:simatic_s7_300_cpu:-:*:*:*:*:*:*:* |
| siemens | simatic_s7_400_cpu_firmware | - | cpe:2.3:o:siemens:simatic_s7_400_cpu_firmware:-:*:*:*:*:*:*:* |
| siemens | simatic_s7_400_cpu | - | cpe:2.3:h:siemens:simatic_s7_400_cpu:-:*:*:*:*:*:*:* |
| siemens | simatic_cp_443-1_firmware | - | cpe:2.3:o:siemens:simatic_cp_443-1_firmware:-:*:*:*:advanced:*:*:* |
| siemens | simatic_cp_443-1 | - | cpe:2.3:h:siemens:simatic_cp_443-1:-:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2016-8672
2016-11-23 11:59:00
cvelist
cvelist
CVE-2016-8672
2016-11-23 11:00:00
nessus
nessus
prion
prion
Design/Logic Flaw
2016-11-23 11:59:00
cve
cve
CVE-2016-8672
2016-11-23 11:59:00
ics
ics