CVE-2017-6868 Auth bypass in Siemens SIMATIC CP 44x-1 Redundant Network Access Modules
Unauthenticated remote attackers can perform administrative actions on Siemens SIMATIC CP modules if specific network and storage conditions are met.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-6868?
CVE-2017-6868 is a high-severity authentication bypass vulnerability in Siemens SIMATIC CP 44x-1 Redundant Network Access Modules, published on 7 Jul 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An Improper Authentication issue was discovered in Siemens SIMATIC CP 44x-1 RNA, all versions prior to 1.4.1. An unauthenticated remote attacker may be able to perform administrative actions on the Communication Process (CP) of the RNA series module, if network access to Port 102/TCP is available and the configuration file for the CP is stored on the RNA's CPU.
Weakness: CWE-287
Which versions are affected by CVE-2017-6868?
It affects 1 product.
Products include Siemens Simatic Cp 44x-1 Redundant Network Access Modules.
How do I fix CVE-2017-6868?
No fix has been published for CVE-2017-6868 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2017-6868 being exploited?
There is no known exploitation of CVE-2017-6868 in the wild and no public exploit code.
Sources
Also known as GHSA-x7xv-3f7c-pp2m.