5.5
Moyenne
CVE-2021-40364 A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3…
Description
A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC04), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC WinCC V15 and earlier (All versions < V15 SP1 Update 7), SIMATIC WinCC V16 (All versions < V16 Update 5), SIMATIC WinCC V17 (All versions < V17 Update 2), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 19), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 5). The affected systems store sensitive information in log files. An attacker with access to the log files could publicly expose the information or reuse it to develop further attacks on the system.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SIMATIC PCS 7 V8.2 | Versions non publiées | |
| SIMATIC PCS 7 V9.0 | Versions non publiées | |
| SIMATIC PCS 7 V9.1 | Versions non publiées | |
| SIMATIC WinCC V15 and earlier | Versions non publiées | |
| SIMATIC WinCC V16 | Versions non publiées | |
| SIMATIC WinCC V17 | Versions non publiées | |
| SIMATIC WinCC V7.4 | Versions non publiées | |
| SIMATIC WinCC V7.5 | Versions non publiées |
Références
- cert-portal.siemens.com cert-portal.siemens.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de SIMATIC PCS 7 V8.2
Les 10 CVE de SIMATIC PCS 7 V8.2 →
CVE-2023-28829
A vulnerability has been identified in SIMATIC NET PC Software V14 (All versions), SIMATIC NET PC Software V15 (All…
3.9
Faible
CVE-2022-24287
A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3…
7.8
Élevée
CVE-2022-0778
The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for…
Non notée
CVE-2021-40363
A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS…
Non notée