Lucene search

[email protected]NVD:CVE-2015-2823

HistoryApr 08, 2015 - 4:59 p.m.

CVE-2015-2823

2015-04-0816:59:01

CWE-287

[email protected]

web.nvd.nist.gov

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.9 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.7%

JSON

Siemens SIMATIC HMI Basic Panels 2nd Generation before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC HMI Comfort Panels before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC WinCC Runtime Advanced before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC WinCC Runtime Professional before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC HMI Basic Panels 1st Generation (WinCC TIA Portal), SIMATIC HMI Mobile Panel 277 (WinCC TIA Portal), SIMATIC HMI Multi Panels (WinCC TIA Portal), and SIMATIC WinCC 7.x before 7.3 Upd4 allow remote attackers to complete authentication by leveraging knowledge of a password hash without knowledge of the associated password.

Affected configurations

NVD

Node

siemenswinccMatch7.0

siemenswinccMatch7.1

siemenswinccMatch7.2

siemenswinccMatch7.3

Node

siemenswinccRange≤13.0sp1

siemenswinccRange≤13.0sp1advanced

AND

siemenssimatic_hmi_basic_panels_generation_1

siemenssimatic_hmi_basic_panels_generation_2

siemenssimatic_hmi_comfort_panels

siemenssimatic_hmi_mobile_panel_277

siemenssimatic_hmi_multi_panels

References

www.securityfocus.com/bid/74040

www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-487246.pdf

cert-portal.siemens.com/productcert/pdf/ssa-487246.pdf

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.9 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.7%

JSON

Related for NVD:CVE-2015-2823

prion1 cve1 cvelist1 ptsecurity1 nessus1 ics2