CVE-2018-13811
published 2018-12-13CVE-2018-13811: A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All Versions < V15.1). Password hashes with insufficient computational effort could allow…
PriorityP424medium5.5CVSS 3.0
AVLACLPRLUINSUCHINAN
EPSS
0.24%
15.0th percentile
A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All Versions < V15.1). Password hashes with insufficient computational effort could allow an attacker to access to a project file and reconstruct passwords. The vulnerability could be exploited by an attacker with local access to the project file. No user interaction is required to exploit the vulnerability. The vulnerability could allow the attacker to obtain certain passwords from the project. At the time of advisory publication no public exploitation of this vulnerability was known.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| siemens | simatic_step_7 | < 15.1 | 15.1 |
| siemens_ag | simatic_step_7 | — | — |
CVSS provenance
nvdv3.05.5MEDIUMCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Siemens SIMATIC STEP 7 (TIA Portal)
cisa_ics·2018-11-13·CVSS 5.5
[MEDIUM] Siemens SIMATIC STEP 7 (TIA Portal)
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Siemens SIMATIC STEP 7 (TIA Portal)
Last RevisedNovember 13, 2018
Alert CodeICSA-18-317-06
## 1. EXECUTIVE SUMMARY
-
CVSS v3 4.0
- ATTENTION: Low skill level to exploit
- Vendor: Siemens
- Equipment: SIMATIC STEP 7 (TIA Portal)
- Vulnerability: Unprotected Storage of Credentials
## 2. RISK EVALUATION
Successful exploitation of this vulnerability could allow an attacker to reconstruct passwords.
## 3. TECHNICAL DETAILS
## 3.1 AFFECTED PRODUCTS
Siemens reports the following SIMATIC STEP 7 product is affected:
- SIMATIC STEP 7 (TIA Portal): All versions prior to 15.1
##
GHSA
GHSA-h726-fjm4-p2g2: A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All Versions < V15
ghsa_unreviewed·2022-05-13
CVE-2018-13811 [MEDIUM] CWE-200 GHSA-h726-fjm4-p2g2: A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All Versions < V15
A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All Versions < V15.1). Password hashes with insufficient computational effort could allow an attacker to access to a project file and reconstruct passwords. The vulnerability could be exploited by an attacker with local access to the project file. No user interaction is required to exploit the vulnerability. The vulnerability could allow the attacker to obtain certain passwords from the project. At the time of advisory publication no public exploitation of this vulnerability was known.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2018-12-13
Published