CVE-2011-4514
Critical
Description
The TELNET daemon in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime does not perform authentication, which makes it easier for remote attackers to obtain access via a TCP session.
SeverityCritical
CVSS10.0
Exploit probability—
ProductSiemens Wincc Flexible
PublishedFeb 3, 2012
First seenFeb 3, 2012
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens wincc_flexible | 2004, 2005, 2007, 2008 | — |
| siemens wincc | v11 | — |
| siemens simatic_hmi_panels | comfort_panels, mobile_panels, mp, op, tp | — |
| siemens wincc_runtime_advanced | v11 | — |
| siemens wincc_flexible_runtime | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.