CVE-2011-4513 — Siemens Simatic HMI Panels vulnerability

3 documents3 sources

Severity

10.0CRITICALNVD

EPSS

3.9%

top 11.73%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Siemens Simatic HMI Panels Siemens Wincc Siemens Wincc Flexible +1 more

Timeline

PublishedFeb 3

Latest updateMay 17

Description

Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allow user-assisted remote attackers to execute arbitrary code via a crafted project file, related to the HMI web server and runtime loader.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages4 packages

▶NVDsiemens/wincc_runtime_advancedv11

▶NVDsiemens/wincc_flexible4 versions+3

▶NVDsiemens/winccv11

▶NVDsiemens/simatic_hmi_panels5 versions+4

🔴Vulnerability Details

GHSA

GHSA-q4v4-44gg-hcfc: Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; W↗2022-05-17

▶

CVEList

CVE-2011-4513: Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; W↗2012-02-03

▶