CVEvulnerability
CVE-2013-4911
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-08-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in Siemens WinCC (TIA Portal) 11 and 12 before 12 SP1 allows remote attackers to hijack the authentication of unspecified victims by leveraging improper configuration of SIMATIC HMI panels by the WinCC product.
Affected configurations
• siemens wincc 11.0
• siemens wincc 12.0
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://scadastrangelove.blogspot.com/2013/08/ssa-064884-wincctia-portal-fixes.html scadastrangelove.blogspot.com
- http://secunia.com/advisories/54051 secunia.com
- http://secunia.com/advisories/54252 secunia.com
- http://www.securityfocus.com/bid/61536 www.securityfocus.com
- http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-064884.pdf Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86099 exchange.xforce.ibmcloud.com
- https://ics-cert.us-cert.gov/advisories/ICSA-13-213-02 ics-cert.us-cert.gov
- http://scadastrangelove.blogspot.com/2013/08/ssa-064884-wincctia-portal-fixes.html scadastrangelove.blogspot.com
- http://secunia.com/advisories/54051 secunia.com
- http://secunia.com/advisories/54252 secunia.com
- http://www.securityfocus.com/bid/61536 www.securityfocus.com
- http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-064884.pdf Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86099 exchange.xforce.ibmcloud.com
- https://ics-cert.us-cert.gov/advisories/ICSA-13-213-02 ics-cert.us-cert.gov