Siemens SIMATIC PCS 7/SIMATIC WinCC access control

Summaryinfo

A vulnerability, which was classified as critical, has been found in Siemens SIMATIC PCS 7 and SIMATIC WinCC. The affected element is an unknown function. This manipulation causes access control. This vulnerability is handled as CVE-2019-10922. The attack can be initiated remotely. There is not any exploit available. It is advisable to implement restrictive firewalling.

Detailsinfo

A vulnerability has been found in Siemens SIMATIC PCS 7 and SIMATIC WinCC (SCADA Software) (affected version unknown) and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation with an unknown input leads to a access control vulnerability. The CWE definition for the vulnerability is CWE-284. The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 and newer (All versions), SIMATIC WinCC V7.2 and earlier (All versions), SIMATIC WinCC V7.3 and newer (All versions). An attacker with network access to affected installations, which are configured without "Encrypted Communication", can execute arbitrary code. The security vulnerability could be exploited by an unauthenticated attacker with network access to the affected installation. No user interaction is required to exploit this security vulnerability. The vulnerability impacts confidentiality, integrity, and availability of the device. At the time of advisory publication no public exploitation of this security vulnerability was known.

The bug was discovered 05/14/2019. The weakness was released 05/14/2019 (Website). It is possible to read the advisory at securityfocus.com. This vulnerability is known as CVE-2019-10922 since 04/08/2019. The attack can be launched remotely. The exploitation doesn't need any form of authentication. The technical details are unknown and an exploit is not publicly available. The pricing for an exploit might be around USD $5k-$25k at the moment (estimation calculated on 09/19/2023). The attack technique deployed by this issue is T1068 according to MITRE ATT&CK.

Proper firewalling of is able to address this issue.

Entry connected to this vulnerability is available at VDB-135027. Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• SCADA Software

Vendor

• Siemens

Name

• SIMATIC PCS 7
• SIMATIC WinCC

License

• commercial

Website

• Vendor: https://www.siemens.com/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion