Siemens SIMATIC WinCC TIA Portal CVE-2013-4911 Cross Site Request Forgery Vulnerability
BID:61536
Info
Siemens SIMATIC WinCC TIA Portal CVE-2013-4911 Cross Site Request Forgery Vulnerability
| Bugtraq ID: | 61536 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-4911 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 31 2013 12:00AM |
| Updated: | Aug 01 2013 05:55PM |
| Credit: | Timur Yunusov and Sergey Bobrov from Positive Technologies |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Siemens SIMATIC WinCC TIA Portal CVE-2013-4911 Cross Site Request Forgery Vulnerability
Siemens SIMATIC WinCC TIA Portal is prone to a cross-site request-forgery vulnerability.
Exploiting this issue may allow a remote attacker to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible.
Siemens SIMATIC WinCC TIA Portal prior to 12SP1 are vulnerable.
Siemens SIMATIC WinCC TIA Portal is prone to a cross-site request-forgery vulnerability.
Exploiting this issue may allow a remote attacker to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible.
Siemens SIMATIC WinCC TIA Portal prior to 12SP1 are vulnerable.
Exploit / POC
Siemens SIMATIC WinCC TIA Portal CVE-2013-4911 Cross Site Request Forgery Vulnerability
To exploit this issue an attacker must entice an unsuspecting victim to open a malicious URI.
To exploit this issue an attacker must entice an unsuspecting victim to open a malicious URI.
Solution / Fix
Siemens SIMATIC WinCC TIA Portal CVE-2013-4911 Cross Site Request Forgery Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Siemens SIMATIC WinCC TIA Portal CVE-2013-4911 Cross Site Request Forgery Vulnerability
References:
References: