Critical ICSA-18-018-01A 8 CVEs

ICSA-18-018-01A Siemens SIMATIC WinCC Add-On (Update A)

Published Jan 18, 2018 · Updated Feb 22, 2018 · Revision 2

Vendor: Siemens Product: SIMATIC WinCC Add-On Historian CONNECT ALARM Product: SIMATIC WinCC Add-On PI CONNECT ALARM Product: SIMATIC WinCC Add-On PI CONNECT AUDIT TRAIL Product: SIMATIC WinCC Add-On PM-AGENT Product: SIMATIC WinCC Add-On PM-ANALYZE Product: SIMATIC WinCC Add-On PM-CONTROL Product: SIMATIC WinCC Add-On PM-MAINT Product: SIMATIC WinCC Add-On PM-OPEN EXPORT Product: SIMATIC WinCC Add-On PM-OPEN HOST-S Product: SIMATIC WinCC Add-On PM-OPEN IMPORT Product: SIMATIC WinCC Add-On PM-OPEN PI Product: SIMATIC WinCC Add-On PM-OPEN PV02 Product: SIMATIC WinCC Add-On PM-OPEN TCP/IP Product: SIMATIC WinCC Add-On PM-QUALITY Product: SIMATIC WinCC Add-On SICEMENT IT MIS Product: SIMATIC WinCC Add-On SIPAPER IT MIS

Vulnerabilities 8

Unscored —

CVE-2017-11496

Stack buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sent…

Oct 2, 2017
Unscored —

CVE-2017-11497

Stack buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sent…

Oct 2, 2017
Unscored —

CVE-2017-11498

Buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel L…

Oct 2, 2017
Unscored —

CVE-2017-12818

Stack overflow in custom XML-parser in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LD…

Gemalto Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE

Oct 3, 2017
Unscored —

CVE-2017-12819

Remote manipulations with language pack updater lead to NTLM-relay attack for system user in Gemalto's HASP SRM, Sentin…

Gemalto Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE

Oct 3, 2017
Unscored —

CVE-2017-12820

Arbitrary memory read from controlled memory pointer in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products pri…

Gemalto Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE

Oct 3, 2017
Unscored —

CVE-2017-12821

Memory corruption in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55…

Gemalto Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE

Oct 3, 2017
Unscored —

CVE-2017-12822

Remote enabling and disabling admin interface in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to S…

Gemalto Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE

Oct 3, 2017

Revision history

2018-02-22 #2
Added missing CVE references
2018-01-18 #1
Publication Date

References

SSA-127490: Vulnerabilities in SIMATIC WinCC Add-Ons
https://cert-portal.siemens.com/productcert/txt/ssa-127490.txt
ICSA Advisory ICSA-18-018-01A - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-18-018-01A
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B