CVE-2015-1358: Medium severity siemens wincc vulnerability
The remote-management module in the (1) Multi Panels, (2) Comfort Panels, and (3) RT Advanced functionality in Siemens SIMATIC WinCC (TIA Portal) before 13 SP1 and in the (4) panels and (5) runtime functionality in SIMATIC WinCC flexible before 2008 SP3 Up7 does not properly encrypt credentials in transit, which makes it easier for remote attackers to determine cleartext credentials by sniffing the network and conducting a decryption attack.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1358?
CVE-2015-1358 is classified as a high severity vulnerability due to improper encryption of credentials.
How do I fix CVE-2015-1358?
To fix CVE-2015-1358, it is recommended to update to the latest version of Siemens SIMATIC WinCC or apply any relevant security patches provided by Siemens.
What products are affected by CVE-2015-1358?
CVE-2015-1358 affects Siemens SIMATIC WinCC versions prior to 13 SP1 and SIMATIC WinCC flexible versions before 2008 SP3 Up7.
What is the impact of CVE-2015-1358?
The impact of CVE-2015-1358 includes the potential compromise of credentials due to insufficient encryption in remote management functions.
Is CVE-2015-1358 actively exploited?
As of the last reports, there is no public information indicating that CVE-2015-1358 has been actively exploited.