CVE-2011-4515: Medium severity siemens tia portal vulnerability
Siemens WinCC (TIA Portal) 11 uses a reversible algorithm for storing HMI web-application passwords in world-readable and world-writable files, which allows local users to obtain sensitive information by leveraging (1) physical access or (2) Sm@rt Server access.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4515?
CVE-2011-4515 is classified as a high severity vulnerability due to the potential for local users to gain unauthorized access to sensitive information.
How do I fix CVE-2011-4515?
To mitigate CVE-2011-4515, it is recommended to update Siemens WinCC (TIA Portal) to a version that does not use a reversible algorithm for password storage.
What impact does CVE-2011-4515 have on system security?
CVE-2011-4515 allows local users with physical access to obtain HMI web-application passwords, leading to possible unauthorized access to sensitive controls.
Is physical access required to exploit CVE-2011-4515?
Yes, physical access is a primary requirement for leveraging CVE-2011-4515 effectively.
What versions of Siemens WinCC are affected by CVE-2011-4515?
CVE-2011-4515 specifically affects Siemens WinCC (TIA Portal) version 11.0.