CVE-2015-2823: Medium severity siemens wincc vulnerability
Siemens SIMATIC HMI Basic Panels 2nd Generation before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC HMI Comfort Panels before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC WinCC Runtime Advanced before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC WinCC Runtime Professional before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC HMI Basic Panels 1st Generation (WinCC TIA Portal), SIMATIC HMI Mobile Panel 277 (WinCC TIA Portal), SIMATIC HMI Multi Panels (WinCC TIA Portal), and SIMATIC WinCC 7.x before 7.3 Upd4 allow remote attackers to complete authentication by leveraging knowledge of a password hash without knowledge of the associated password.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-2823?
CVE-2015-2823 has a moderate severity rating due to potential unauthorized access to sensitive information.
How do I fix CVE-2015-2823?
To fix CVE-2015-2823, update to the latest version of Siemens WinCC at or after WinCC (TIA Portal) 13 SP1 Update 2.
Which versions of Siemens software are affected by CVE-2015-2823?
CVE-2015-2823 affects Siemens WinCC up to version 13 SP1 Update 2 and various HMI panels before specified updates.
What types of attacks could exploit CVE-2015-2823?
CVE-2015-2823 could be exploited through unauthorized access leading to potential alteration of operational processes.
Is there a patch available for CVE-2015-2823?
Yes, Siemens has released patches for CVE-2015-2823 as part of updates to the affected WinCC and HMI software.