SIEMENS SIMATIC WinCC Open Architecture Denial of Service Vulnerabilities

Bugtraq ID:	65347
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2014-1699
Remote:	Yes
Local:	No
Published:	Feb 04 2014 12:00AM
Updated:	Feb 04 2014 12:00AM
Credit:	Gleb Gritsai, Ilya Karpov, and Kirill Nesterov.
Vulnerable:	Siemens SIMATIC WinCC OA 3.12
Not Vulnerable:	Siemens SIMATIC WinCC OA 3.12 P002

SIEMENS SIMATIC WinCC Open Architecture Denial of Service Vulnerabilities

SIEMENS SIMATIC WinCC Open Architecture is prone to denial-of-service vulnerability.

Remote attackers may exploit this issue to cause denial-of-service conditions, denying service to legitimate users.

SIEMENS SIMATIC WinCC OA prior to 3.12 P002 are vulnerable.

SIEMENS SIMATIC WinCC Open Architecture Denial of Service Vulnerabilities

References:

• Siemens Homepage (Siemens)
  
• Siemens SIMATIC WinCC Open Architecture Multiple Vulnerabilities (Securelist)
  
• ICSA-14-035-01 (ICS-CERT)
  
• SSA-342587: Vulnerabilities in SIMATIC WinCC Open Architecture (Siemens)