Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2015-1358

EPSS 0.80% · P74
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2015-1358

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The remote-management module in the (1) Multi Panels, (2) Comfort Panels, and (3) RT Advanced functionality in Siemens SIMATIC WinCC (TIA Portal) before 13 SP1 and in the (4) panels and (5) runtime functionality in SIMATIC WinCC flexible before 2008 SP3 Up7 does not properly encrypt credentials in transit, which makes it easier for remote attackers to determine cleartext credentials by sniffing the network and conducting a decryption attack.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Siemens SIMATIC WinCC remote-management模块加密问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Siemens SIMATIC WinCC是德国西门子（Siemens）公司的一套自动化的数据采集与监控（SCADA）系统。该系统提供过程监视、数据采集等功能。 Siemens SIMATIC WinCC 13.0及之前版本的Multi Panels、Comfort Panels和RT Advanced功能中的remote-management模块中存在安全漏洞，该漏洞源于程序没有正确加密传输中的证书。远程攻击者可通过嗅探网络并实施解密攻击利用该漏洞获取明文证书。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2015-1358

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2015-1358

请登录查看更多情报信息。

Same Patch Batch · n/a · 2015-02-18 · 8 CVEs total

CVE-2015-0108多款IBM产品跨站脚本漏洞
CVE-2015-0109多款IBM产品跨站脚本漏洞
CVE-2015-0617Cisco ASR 5500 System Architecture Evolution Gateway 资源管理错误漏洞
CVE-2015-0620Cisco TelePresence Management Suite XML解析器输入验证漏洞
CVE-2015-0621Cisco TelePresence MCU 拒绝服务漏洞
CVE-2015-1355Siemens SIMATIC STEP 7 (TIA Portal) 加密问题漏洞
CVE-2015-1356Siemens SIMATIC STEP 7 权限许可和访问控制漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2015-1358

No comments yet

Leave a comment