Siemens Tecnomatix FactoryLink Multiple Security Vulnerabilities

Bugtraq ID:	46934
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Mar 21 2011 12:00AM
Updated:	Jun 27 2011 07:30AM
Credit:	Luigi Auriemma
Vulnerable:	Siemens Tecnomatix FactoryLink 8.0.1.1473
Not Vulnerable:

Siemens Tecnomatix FactoryLink Multiple Security Vulnerabilities

Siemens Tecnomatix FactoryLink is prone to multiple security vulnerabilities, including buffer-overflow issues, a memory-corruption issue, information-disclosure issues, and denial-of-service issues.

Attackers can leverage these issues to obtain sensitive information, run arbitrary code, or cause a denial of service. Other attacks may also be possible.

Siemens Tecnomatix FactoryLink 8.0.1.1473 is vulnerable; other versions may also be affected.

Siemens Tecnomatix FactoryLink Multiple Security Vulnerabilities

The following proof-of-concept and exploits are available:

• /data/vulnerabilities/exploits/46934.zip
• /data/vulnerabilities/exploits/46934.rb
• /data/vulnerabilities/exploits/46934-2.rb

Siemens Tecnomatix FactoryLink Multiple Security Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Siemens Tecnomatix FactoryLink Multiple Security Vulnerabilities

References:

• FactoryLink Supervisory Control and Data Acquisition Homepage (Siemens)
  
• factorylink_1-adv (Luigi Auriemma)
  
• factorylink_2-adv (Luigi Auriemma)
  
• factorylink_3-adv (Luigi Auriemma)
  
• factorylink_4-adv (Luigi Auriemma)
  
• factorylink_5-adv (Luigi Auriemma)
  
• factorylink_6-adv (Luigi Auriemma)
  
• Vulnerabilities in some SCADA server softwares (Luigi Auriemma )