CVE-2018-13799 Privilege escalation in SIMATIC WinCC OA V3.14 and prior
Unauthenticated remote attackers can escalate privileges in SIMATIC WinCC OA via improper access control on port 5678, compromising system integrity and availability.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-13799?
CVE-2018-13799 is a critical vulnerability in Siemens AG SIMATIC WinCC OA V3.14 and prior, published on 12 Sep 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability has been identified in SIMATIC WinCC OA V3.14 and prior (All versions < V3.14-P021). Improper access control to a data point of the affected product could allow an unauthenticated remote user to escalate its privileges in the context of SIMATIC WinCC OA V3.14. This vulnerability could be exploited by an attacker with network access to port 5678/TCP of the SIMATIC WinCC OA V3.14 server. Successful exploitation requires no user privileges and no user interaction. This vulnerability could allow an attacker to compromise integrity and availability of the SIMATIC WinCC OA system. At the time of advisory publication no public exploitation of this vulnerability was known.
Weakness: CWE-269
Which versions are affected by CVE-2018-13799?
It affects 1 product.
Products include Siemens Simatic Wincc Open Architecture.
How do I fix CVE-2018-13799?
No fix has been published for CVE-2018-13799 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-13799 being exploited?
There is no known exploitation of CVE-2018-13799 in the wild and no public exploit code.
Other vulnerabilities in Siemens AG SIMATIC WinCC OA V3.14 and prior
Sources
Also known as GHSA-93r3-p736-cjhx.