Summaryinfo

A vulnerability, which was classified as critical, was found in Siemens SIMATIC HMI Comfort Panel, SIMATIC HMI Comfort Outdoor Panel, SIMATIC HMI KTP Mobile Panel and SIMATIC WinCC. Affected is an unknown function of the component SNMP. The manipulation as part of Community String leads to access control. This vulnerability is traded as CVE-2019-6572. It is possible to launch the attack remotely. There is no exploit available. It is recommended to apply restrictive firewalling. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Detailsinfo

A vulnerability, which was classified as critical, has been found in Siemens SIMATIC HMI Comfort Panel, SIMATIC HMI Comfort Outdoor Panel, SIMATIC HMI KTP Mobile Panel and SIMATIC WinCC (SCADA Software) (the affected version unknown). This issue affects an unknown part of the component SNMP. The manipulation as part of a Community String leads to a access control vulnerability. Using CWE to declare the problem leads to CWE-264. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15.1 Update 1), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (All versions < V15.1 Update 1), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F (All versions < V15.1 Update 1), SIMATIC WinCC Runtime Advanced (All versions < V15.1 Update 1), SIMATIC WinCC Runtime Professional (All versions < V15.1 Update 1), SIMATIC WinCC (TIA Portal) (All versions < V15.1 Update 1), SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel) (All versions). The affected device offered SNMP read and write capacities with a publicly know hardcoded community string. The security vulnerability could be exploited by an attacker with network access to the affected device. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise confidentiality and integrity of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known.

The bug was discovered 05/14/2019. The weakness was disclosed 05/14/2019 (Website). It is possible to read the advisory at securityfocus.com. The identification of this vulnerability is CVE-2019-6572 since 01/22/2019. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. The technical details are unknown and an exploit is not publicly available. The pricing for an exploit might be around USD $5k-$25k at the moment (estimation calculated on 09/19/2023). The attack technique deployed by this issue is T1068 according to MITRE ATT&CK.

Addressing this vulnerability is possible by firewalling udp/161 (snmp).

The entries VDB-135049 and VDB-135050 are pretty similar. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• SCADA Software

Vendor

• Siemens

Name

• SIMATIC HMI Comfort Outdoor Panel
• SIMATIC HMI Comfort Panel
• SIMATIC HMI KTP Mobile Panel
• SIMATIC WinCC

License

• commercial

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion