CVE-2017-6871

概要

参考情報

• securityfocus.com/bid/99582 · Third Party Advisory
• siemens.com/cert/pool/cert/siemens_security_advisory_ssa-589378.pdf · Vendor Advisory

simatic wincc sm@rtclient のその他の脆弱性

• CVE-2017-6870高 7.4A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android (All versions before V1.0.2.2). The existing TLS protocol im…
• CVE-2015-5084低 2.1The Siemens SIMATIC WinCC Sm@rtClient and Sm@rtClient Lite applications before 01.00.01.00 for Android do not properly store passwords, whic…
• CVE-2014-5233低 1.9The Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows physically proximate attackers to discover Sm@rtServer credentials by …
• CVE-2014-5232低 1.9The Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows local users to bypass an intended application-password requirement by …
• CVE-2014-5231低 2.1The Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows physically proximate attackers to extract the password from storage vi…