Medium ICSA-18-109-01 1 CVE

Siemens SIMATIC WinCC OA Operator IOS App (Update A)

Published Apr 19, 2018 · Updated Oct 9, 2018 · Revision 2

Vendor: Siemens Product: SIMATIC WinCC OA Operator iOS App

Summary

Successful exploitation of this vulnerability could allow an attacker with physical access to read sensitive data located in the app 's directory.

Vulnerabilities 1

Unscored —

CVE-2018-4847

A vulnerability has been identified in SIMATIC WinCC OA Operator iOS App (All versions < V1.4). Insufficient protection…

Siemens SIMATIC WinCC OA Operator iOS App iOS ICS / OT

Apr 23, 2018

Revision history

2018-10-09 #2
ICSA-18-109-01 Siemens SIMATIC WinCC OA Operator iOS App (Update A)
2018-04-19 #1
ICSA-18-109-01 Siemens SIMATIC WinCC OA Operator IOS App

References

ICS Advisory ICSA-18-109-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-18-109-01
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-18-109-01