Siemens SIMATIC IT UADM up to 1.2 Service Port 1434 Credentials insufficiently protected credentials

Summaryinfo

A vulnerability described as problematic has been identified in Siemens SIMATIC IT UADM up to 1.2. Affected by this vulnerability is an unknown functionality of the component Service Port 1434. Such manipulation leads to insufficiently protected credentials (Credentials). This vulnerability is referenced as CVE-2019-13929. It is possible to launch the attack remotely. No exploit is available. Restrictive firewalling should be applied.

Detailsinfo

A vulnerability was found in Siemens SIMATIC IT UADM up to 1.2 (SCADA Software) and classified as problematic. Affected by this issue is an unknown code block of the component Service Port 1434. The manipulation with an unknown input leads to a insufficiently protected credentials vulnerability (Credentials). Using CWE to declare the problem leads to CWE-522. The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval. Impacted is confidentiality. CVE summarizes:

A vulnerability has been identified in SIMATIC IT UADM (All versions < V1.3). An authenticated remote attacker with network access to port 1434/tcp of SIMATIC IT UADM could potentially recover a password that can be used to gain read and write access to the related TeamCenter station. The security vulnerability could be exploited only if the attacker is authenticated. No user interaction is required to exploit this security vulnerability. Successful exploitation of the security vulnerability compromises the confidentiality of the targeted system. At the time of advisory publication no public exploitation of this security vulnerability was known.

The weakness was published 10/10/2019 (Website). The advisory is available at cert-portal.siemens.com. This vulnerability is handled as CVE-2019-13929 since 07/18/2019. The attack may be launched remotely. The requirement for exploitation is a simple authentication. The technical details are unknown and an exploit is not available. This vulnerability is assigned to T1552 by the MITRE ATT&CK project.

Addressing this vulnerability is possible by firewalling .

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• SCADA Software

Vendor

• Siemens

Name

• SIMATIC IT UADM

Version

• 1.0
• 1.1
• 1.2

License

• commercial

Website

• Vendor: https://www.siemens.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion