Design/Logic Flaw

A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android All versions before V1.0.2.2 and SIMATIC WinCC Sm@rtClient for Android Lite All versions before V1.0.2.2. An attacker with physical access to an unlocked mobile device, that has the affected app running, could bypass...

Design/Logic Flaw

A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android All versions before V1.0.2.2. The existing TLS protocol implementation could allow an attacker to read and modify data within a TLS session while performing a Man-in-the-Middle MitM attack...

Denial of service

A vulnerability was discovered in Siemens SIMATIC Logon All versions before V1.6 that could allow specially crafted packets sent to the SIMATIC Logon Remote Access service on port 16389/tcp to cause a Denial-of-Service condition. The service restarts automatically...

CVE-2017-6870

A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android All versions before V1.0.2.2. The existing TLS protocol implementation could allow an attacker to read and modify data within a TLS session while performing a Man-in-the-Middle MitM attack...

CVE-2017-6871

A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android All versions before V1.0.2.2 and SIMATIC WinCC Sm@rtClient for Android Lite All versions before V1.0.2.2. An attacker with physical access to an unlocked mobile device, that has the affected app running, could bypass...

CVE-2017-9938

A vulnerability was discovered in Siemens SIMATIC Logon All versions before V1.6 that could allow specially crafted packets sent to the SIMATIC Logon Remote Access service on port 16389/tcp to cause a Denial-of-Service condition. The service restarts automatically...

CVE-2017-6870

A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android All versions before V1.0.2.2. The existing TLS protocol implementation could allow an attacker to read and modify data within a TLS session while performing a Man-in-the-Middle MitM attack...

CVE-2017-9938

A vulnerability was discovered in Siemens SIMATIC Logon All versions before V1.6 that could allow specially crafted packets sent to the SIMATIC Logon Remote Access service on port 16389/tcp to cause a Denial-of-Service condition. The service restarts automatically...

CVE-2017-6870

CVE-2017-6870 affects Siemens SIMATIC WinCC Sm@rtClient for Android (all versions prior to 1.0.2.2). The TLS implementation could allow an attacker in a network-position to read and modify data within a TLS session via a Man-in-the-Middle attack. Exploitation details are not provided in the docum...

CVE-2017-6871

CVE-2017-6871 affects Siemens SIMATIC WinCC Sm@rtClient for Android and Sm@rtClient Lite for Android (all versions before 1.0.2.2). The vulnerability is an authentication bypass: when a device is unlocked and the affected app runs, an attacker with physical access could bypass the app’s authentic...

CVE-2017-9938: Out-of-bounds Write

A vulnerability was discovered in Siemens SIMATIC Logon All versions before V1.6 that could allow specially crafted packets sent to the SIMATIC Logon Remote Access service on port 16389/tcp to cause a Denial-of-Service condition. The service restarts automatically...

CVE-2017-6871: Authentication Bypass Using an Alternate Path or Channel

A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android All versions before V1.0.2.2 and SIMATIC WinCC Sm@rtClient for Android Lite All versions before V1.0.2.2. An attacker with physical access to an unlocked mobile device, that has the affected app running, could bypass...

CVE-2017-6870: Channel Accessible by Non-Endpoint

A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android All versions before V1.0.2.2. The existing TLS protocol implementation could allow an attacker to read and modify data within a TLS session while performing a Man-in-the-Middle MitM attack...

PT-2017-17386

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC Sm@rtClient for Android versions prior to 1.0.2.2 Siemens SIMATIC WinCC Sm@rtClient for Android Lite versions prior to 1.0.2.2 Description A vulnerability was discovered that allows an attacker with physical access to an...

PT-2017-17385

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC Sm@rtClient for Android versions prior to V1.0.2.2 Description A security issue was found in the TLS protocol implementation, allowing an attacker to intercept and alter data during a Man-in-the-Middle MitM attack...

CVE-2017-9938

Siemens SIMATIC Logon (pre-1.6) is vulnerable to an Out-of-Bounds Write (CWE-787) via specially crafted packets to the Remote Access service on TCP 16389, causing a Denial-of-Service (the service restarts automatically). Affected: SIMATIC Logon, all versions prior to V1.6. Impact: DoS with availa...

PT-2017-19300

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC Logon versions prior to V1.6 Description A vulnerability was discovered that could allow specially crafted packets sent to the SIMATIC Logon Remote Access service on port 16389/tcp to cause a Denial-of-Service condition. The...

Siemens SIMATIC Logon Out-of-Bounds Write Denial of Service Vulnerability

SIMATIC Logon is automation software. A security vulnerability in the handling of constructed packets by the Remote Access Service on port 16389/TCP of SIMATIC Logon allows remote attackers to conduct denial-of-service attacks by submitting special requests exploiting the vulnerability...

Siemens Patches Authentication Bypass Flaw in SiPass Server

A handful of vulnerabilities in Siemens’ SiPass integrated server have been patched, including one that allows an attacker to bypass authentication on the box. SiPass is the company’s integrated access control server managing physical access in a number of industries and use cases. The product...

Siemens SIMATIC Sm@rtClient Android App

CVSS v3 7.4 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: SIMATIC Sm@rtClient Android App Vulnerabilities: Man-in-the-Middle, Authentication Bypass Using an Alternate Path or Channel AFFECTED PRODUCTS Siemens reports that the vulnerabilities affect the...