CVE-2011-4508
Critical
Description
The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime generates predictable authentication tokens for cookies, which makes it easier for remote attackers to bypass authentication via a crafted cookie.
SeverityCritical
CVSS9.3
Exploit probability—
ProductSiemens Wincc Flexible
PublishedFeb 3, 2012
First seenFeb 3, 2012
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens wincc_flexible | 2004, 2005, 2007, 2008 | — |
| siemens wincc | v ≤ v11, v11 | — |
| siemens simatic_hmi_panels | comfort_panels, mobile_panels, mp, op, tp | — |
| siemens wincc_runtime_advanced | v11 | — |
| siemens wincc_flexible_runtime | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.