Freely subscribe to our NEWSLETTER

This bulletin was written by Vigil@nce : http://vigilance.fr/offer

SYNTHESIS OF THE VULNERABILITY

An attacker can use several vulnerabilities of SIMATIC WinCC.

Impacted products: SIMATIC

Severity: 2/4

Creation date: 16/02/2015

DESCRIPTION OF THE VULNERABILITY

Several vulnerabilities were announced in SIMATIC WinCC.

An attacker can capture the network traffic, in order to
reconstruct the password. [severity:2/4; CVE-2015-1358]

An attacker can decrypt WinCC RT Professional exchanges which use
a constant key, in order to obtain sensitive information.
[severity:2/4; CVE-2014-4686]

ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN

http://vigilance.fr/vulnerability/SIMATIC-WinCC-two-vulnerabilities-16202