CVE-2017-6871 Auth bypass in SIMATIC WinCC Sm@rtClient for Android, SIMATIC WinCC Sm@rtClient Lite for Android
An attacker with physical access to an unlocked device can bypass authentication in the Siemens WinCC Sm@rtClient Android application.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-6871?
CVE-2017-6871 is a medium-severity authentication bypass vulnerability in SIMATIC WinCC Sm@rtClient for Android, SIMATIC WinCC Sm@rtClient Lite for Android, published on 8 Aug 2017. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android (All versions before V1.0.2.2) and SIMATIC WinCC Sm@rtClient for Android Lite (All versions before V1.0.2.2). An attacker with physical access to an unlocked mobile device, that has the affected app running, could bypass the app's authentication mechanism under certain conditions.
Which versions are affected by CVE-2017-6871?
It affects 2 products.
Products include Siemens Simatic Wincc Sm\@rtclient, Siemens Simatic Wincc Sm\@rtclient Lite.
How do I fix CVE-2017-6871?
No fix has been published for CVE-2017-6871 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2017-6871 being exploited?
There is no known exploitation of CVE-2017-6871 in the wild and no public exploit code.
Other vulnerabilities in SIMATIC WinCC Sm@rtClient for Android, SIMATIC WinCC Sm@rtClient Lite for Android
Sources
Also known as GHSA-9fjf-27f3-w5w8.