Multiple Siemens SIMATIC WinCC Products CVE-2014-5231 Local Security Bypass Vulnerability
BID:72065
Info
Multiple Siemens SIMATIC WinCC Products CVE-2014-5231 Local Security Bypass Vulnerability
| Bugtraq ID: | 72065 |
| Class: | Design Error |
| CVE: |
CVE-2014-5231 |
| Remote: | No |
| Local: | Yes |
| Published: | Jan 14 2015 12:00AM |
| Updated: | Jan 14 2015 12:00AM |
| Credit: | Kim Schlyter, Seyton Bradford, and Richard Warren |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Multiple Siemens SIMATIC WinCC Products CVE-2014-5231 Local Security Bypass Vulnerability
Multiple Siemens SIMATIC WinCC products are prone to a local security-bypass vulnerability.
Successful exploits will allow local attackers to bypass certain security restrictions. Other attacks are also possible.
The following products are vulnerable:
Versions prior to Siemens SIMATIC WinCC Sm@rtClient 1.0.2 are vulnerable.
Versions prior to Siemens SIMATIC WinCC Sm@rtClient for IOS 1.0.2 are vulnerable.
Multiple Siemens SIMATIC WinCC products are prone to a local security-bypass vulnerability.
Successful exploits will allow local attackers to bypass certain security restrictions. Other attacks are also possible.
The following products are vulnerable:
Versions prior to Siemens SIMATIC WinCC Sm@rtClient 1.0.2 are vulnerable.
Versions prior to Siemens SIMATIC WinCC Sm@rtClient for IOS 1.0.2 are vulnerable.
Solution / Fix
Multiple Siemens SIMATIC WinCC Products CVE-2014-5231 Local Security Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.