CVE-2021-40360 | ByteOS Network

Vulnerability Details :

CVE-2021-40360

Assigner-siemens

Assigner Org ID-cec7a2ec-15b4-4faf-bd53-b40f371f3a77

Published At-09 Feb, 2022 | 15:17

Updated At-04 Aug, 2024 | 02:44

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC WinCC V15 and earlier (All versions < V15 SP1 Update 7), SIMATIC WinCC V16 (All versions < V16 Update 5), SIMATIC WinCC V17 (All versions < V17 Update 2), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 19), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 6). The password hash of a local user account in the remote server could be granted via public API to a user on the affected system. An authenticated attacker could brute force the password hash and use it to login to the server.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:siemens

Assigner Org ID:cec7a2ec-15b4-4faf-bd53-b40f371f3a77

Published At:09 Feb, 2022 | 15:17

Updated At:04 Aug, 2024 | 02:44

▼CVE Numbering Authority (CNA)

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC WinCC V15 and earlier (All versions < V15 SP1 Update 7), SIMATIC WinCC V16 (All versions < V16 Update 5), SIMATIC WinCC V17 (All versions < V17 Update 2), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 19), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 6). The password hash of a local user account in the remote server could be granted via public API to a user on the affected system. An authenticated attacker could brute force the password hash and use it to login to the server.

Affected Products

Vendor

Product

SIMATIC PCS 7 V8.2

Versions

Affected

All versions

Vendor

Product

SIMATIC PCS 7 V9.0

Versions

Affected

All versions

Vendor

Product

SIMATIC PCS 7 V9.1

Versions

Affected

All versions < V9.1 SP1

Vendor

Product

SIMATIC WinCC V15 and earlier

Versions

Affected

All versions < V15 SP1 Update 7

Vendor

Product

SIMATIC WinCC V16

Versions

Affected

All versions < V16 Update 5

Vendor

Product

SIMATIC WinCC V17

Versions

Affected

All versions < V17 Update 2

Vendor

Product

SIMATIC WinCC V7.4

Versions

Affected

All versions < V7.4 SP1 Update 19

Vendor

Product

SIMATIC WinCC V7.5

Versions

Affected

All versions < V7.5 SP2 Update 6

Problem Types

Type	CWE ID	Description
CWE	CWE-200	CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Type: CWE

CWE ID: CWE-200

Description: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

References

Hyperlink	Resource
https://cert-portal.siemens.com/productcert/pdf/ssa-914168.pdf	x_refsource_MISC

Hyperlink: https://cert-portal.siemens.com/productcert/pdf/ssa-914168.pdf

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://cert-portal.siemens.com/productcert/pdf/ssa-914168.pdf	x_refsource_MISC x_transferred

Hyperlink: https://cert-portal.siemens.com/productcert/pdf/ssa-914168.pdf

Resource:

x_refsource_MISC

x_transferred

▼National Vulnerability Database (NVD)

Source:productcert@siemens.com

Published At:09 Feb, 2022 | 16:15

Updated At:17 Jul, 2023 | 15:15

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC WinCC V15 and earlier (All versions < V15 SP1 Update 7), SIMATIC WinCC V16 (All versions < V16 Update 5), SIMATIC WinCC V17 (All versions < V17 Update 2), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 19), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 6). The password hash of a local user account in the remote server could be granted via public API to a user on the affected system. An authenticated attacker could brute force the password hash and use it to login to the server.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	4.0	MEDIUM	AV:N/AC:L/Au:S/C:P/I:N/A:N

Type: Primary

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 4.0

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:S/C:P/I:N/A:N

CPE Matches

>>simatic_pcs_7>>Versions up to 8.2(inclusive)

cpe:2.3:a:siemens:simatic_pcs_7:*:*:*:*:*:*:*:*

>>simatic_pcs_7>>9.0

cpe:2.3:a:siemens:simatic_pcs_7:9.0:-:*:*:*:*:*:*

>>simatic_pcs_7>>9.1

cpe:2.3:a:siemens:simatic_pcs_7:9.1:-:*:*:*:*:*:*

>>simatic_wincc>>Versions before 7.4(exclusive)

cpe:2.3:a:siemens:simatic_wincc:*:*:*:*:*:*:*:*

>>simatic_wincc>>7.4

cpe:2.3:a:siemens:simatic_wincc:7.4:-:*:*:*:*:*:*

>>simatic_wincc>>7.4

cpe:2.3:a:siemens:simatic_wincc:7.4:sp1:*:*:*:*:*:*

>>simatic_wincc>>7.4

cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update1:*:*:*:*:*:*

>>simatic_wincc>>7.4

cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update10:*:*:*:*:*:*

>>simatic_wincc>>7.4

cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update11:*:*:*:*:*:*

>>simatic_wincc>>7.4

cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update12:*:*:*:*:*:*

>>simatic_wincc>>7.4

cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update13:*:*:*:*:*:*

>>simatic_wincc>>7.4

cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update14:*:*:*:*:*:*

>>simatic_wincc>>7.4

cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update15:*:*:*:*:*:*

>>simatic_wincc>>7.4

cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update16:*:*:*:*:*:*

>>simatic_wincc>>7.4

cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update17:*:*:*:*:*:*

>>simatic_wincc>>7.4

cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update18:*:*:*:*:*:*

>>simatic_wincc>>7.4

cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update2:*:*:*:*:*:*

>>simatic_wincc>>7.4

cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update3:*:*:*:*:*:*

>>simatic_wincc>>7.4

cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update4:*:*:*:*:*:*

>>simatic_wincc>>7.4

cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update5:*:*:*:*:*:*

>>simatic_wincc>>7.4

cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update6:*:*:*:*:*:*

>>simatic_wincc>>7.4

cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update7:*:*:*:*:*:*

>>simatic_wincc>>7.4

cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update8:*:*:*:*:*:*

>>simatic_wincc>>7.4

cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update9:*:*:*:*:*:*

>>simatic_wincc>>7.5

cpe:2.3:a:siemens:simatic_wincc:7.5:-:*:*:*:*:*:*

>>simatic_wincc>>7.5

cpe:2.3:a:siemens:simatic_wincc:7.5:sp1:*:*:*:*:*:*

>>simatic_wincc>>7.5

cpe:2.3:a:siemens:simatic_wincc:7.5:sp1_update1:*:*:*:*:*:*

>>simatic_wincc>>7.5

cpe:2.3:a:siemens:simatic_wincc:7.5:sp1_update2:*:*:*:*:*:*

>>simatic_wincc>>7.5

cpe:2.3:a:siemens:simatic_wincc:7.5:sp2:*:*:*:*:*:*

>>simatic_wincc>>7.5

cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update1:*:*:*:*:*:*

>>simatic_wincc>>7.5

cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update2:*:*:*:*:*:*

>>simatic_wincc>>7.5

cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update3:*:*:*:*:*:*

>>simatic_wincc>>7.5

cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update4:*:*:*:*:*:*

>>simatic_wincc>>7.5

cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update5:*:*:*:*:*:*

>>simatic_wincc>>13

cpe:2.3:a:siemens:simatic_wincc:13:-:*:*:*:*:*:*

>>simatic_wincc>>13

cpe:2.3:a:siemens:simatic_wincc:13:sp1:*:*:*:*:*:*

>>simatic_wincc>>13

cpe:2.3:a:siemens:simatic_wincc:13:sp2:*:*:*:*:*:*

>>simatic_wincc>>14.0.1

cpe:2.3:a:siemens:simatic_wincc:14.0.1:*:*:*:*:*:*:*

>>simatic_wincc>>15

cpe:2.3:a:siemens:simatic_wincc:15:*:*:*:*:*:*:*

>>simatic_wincc>>15.1

cpe:2.3:a:siemens:simatic_wincc:15.1:-:*:*:*:*:*:*

>>simatic_wincc>>15.1

cpe:2.3:a:siemens:simatic_wincc:15.1:update_1:*:*:*:*:*:*

>>simatic_wincc>>15.1

cpe:2.3:a:siemens:simatic_wincc:15.1:update_2:*:*:*:*:*:*

>>simatic_wincc>>15.1

cpe:2.3:a:siemens:simatic_wincc:15.1:update_3:*:*:*:*:*:*

>>simatic_wincc>>15.1

cpe:2.3:a:siemens:simatic_wincc:15.1:update_4:*:*:*:*:*:*

>>simatic_wincc>>15.1

cpe:2.3:a:siemens:simatic_wincc:15.1:update_5:*:*:*:*:*:*

>>simatic_wincc>>15.1

cpe:2.3:a:siemens:simatic_wincc:15.1:update_6:*:*:*:*:*:*

>>simatic_wincc>>16

cpe:2.3:a:siemens:simatic_wincc:16:-:*:*:*:*:*:*

>>simatic_wincc>>16

cpe:2.3:a:siemens:simatic_wincc:16:update1:*:*:*:*:*:*

>>simatic_wincc>>16

cpe:2.3:a:siemens:simatic_wincc:16:update2:*:*:*:*:*:*

>>simatic_wincc>>16

cpe:2.3:a:siemens:simatic_wincc:16:update3:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-522	Primary	nvd@nist.gov
CWE-200	Secondary	productcert@siemens.com

CWE ID: CWE-522

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-200

Type: Secondary

Source: productcert@siemens.com

References

Hyperlink	Source	Resource
https://cert-portal.siemens.com/productcert/pdf/ssa-914168.pdf	productcert@siemens.com	Patch Vendor Advisory

Hyperlink: https://cert-portal.siemens.com/productcert/pdf/ssa-914168.pdf

Source: productcert@siemens.com

Resource:

Patch

Vendor Advisory