Siemens SIMATIC WinCC and PCS 7 CVE-2014-4685 Local Privilege Escalation Vulnerability

Bugtraq ID:	68872
Class:	Unknown
CVE:	CVE-2014-4685
Remote:	No
Local:	Yes
Published:	Jul 23 2014 12:00AM
Updated:	Mar 19 2015 09:46AM
Credit:	Sergey Gordeychik, Alexander Tlyapov, Dmitry Nagibin, and Gleb Gritsai from Positive Technologies
Vulnerable:
Not Vulnerable:

Siemens SIMATIC WinCC and PCS 7 CVE-2014-4685 Local Privilege Escalation Vulnerability

Siemens SIMATIC WinCC and PCS 7 are prone to a local privilege-escalation vulnerability.

Attackers can exploit this issue to gain elevated privileges on affected computers.

Siemens SIMATIC WinCC and PCS 7 CVE-2014-4685 Local Privilege Escalation Vulnerability

An attacker uses readily available tools to exploit the issue.

Siemens SIMATIC WinCC and PCS 7 CVE-2014-4685 Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Siemens SIMATIC WinCC and PCS 7 CVE-2014-4685 Local Privilege Escalation Vulnerability

References:

• Siemens Homepage (Siemens)
  
• SIMATIC WinCC Homepage (Siemens)
  
• (ICSA-14-205-02) Siemens SIMATIC WinCC Vulnerabilities (US-CERT)
  
• SSA-214365: Vulnerabilities in SIMATIC WinCC (Siemens)