NewsSiemens ProductCERT

    SSA-883918 V1.0: Information Disclosure Vulnerability in SIMATIC WinCC

    Multiple versions of SIMATIC WinCC and SIMATIC PCS 7 do not properly handle certain requests to their web application (WinCC WebNavigator, PCS 7 Web Serser, and PCS 7 Web Diagnostics Server), which may lead to the leak of privileged information. This could allow an unauthenticated remote attacker to retrieve information such as users and passwords. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.

    More on WinCC

    Other advisories

    Other news entries

    Source: https://cert-portal.siemens.com/productcert/html/ssa-883918.html

    ID