Vulnerability-Lookup

CNVD-2018-25912

Vulnerability from cnvd - Published: 2018-12-20

Title

Siemens SIMATIC IT LMS、SIMATIC IT Production Suite和SIMATIC IT UA Discrete Manufacturing授权问题漏洞

Description

Siemens SIMATIC IT LMS、SIMATIC IT Production Suite和SIMATIC IT UA Discrete Manufacturing都是德国西门子（Siemens）公司的产品。Siemens SIMATIC IT LMS是一套总体设备效能（OEE）的线路监控系统。SIMATIC IT Production Suite是一套工厂生产管理套件。SIMATIC IT UA Discrete Manufacturing是一套为制造业提供结构化服务的解决方案。 Siemens SIMATIC IT LMS、SIMATIC IT Production Suite 7.1 Upd3之前的7.1版本和SIMATIC IT UA Discrete Manufacturing 2.4之前版本中存在授权问题漏洞，攻击者可利用该漏洞绕过应用程序的身份验证检测，影响系统的保密性、完整性和可用性。

Severity

高

Patch Name

Siemens SIMATIC IT LMS、SIMATIC IT Production Suite和SIMATIC IT UA Discrete Manufacturing授权问题漏洞的补丁

Patch Description

Formal description

目前厂商只发布了SIMATIC IT Production Suite等产品的升级补丁以修复漏洞，产品SIMATIC IT LMS的升级补丁暂未发布，详情请参考链接： https://cert-portal.siemens.com/productcert/pdf/ssa-944083.pdf

Reference

https://ics-cert.us-cert.gov/advisories/ICSA-18-317-07

Impacted products

Name
['Siemens SIMATIC IT LMS ALL', 'Siemens SIMATIC IT UA Discrete Manufacturing <2.4', 'Siemens SIMATIC IT Production Suite 7.1.*，<7.1 Upd3']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-13804"
    }
  },
  "description": "Siemens SIMATIC IT LMS\u3001SIMATIC IT Production Suite\u548cSIMATIC IT UA Discrete Manufacturing\u90fd\u662f\u5fb7\u56fd\u897f\u95e8\u5b50\uff08Siemens\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Siemens SIMATIC IT LMS\u662f\u4e00\u5957\u603b\u4f53\u8bbe\u5907\u6548\u80fd\uff08OEE\uff09\u7684\u7ebf\u8def\u76d1\u63a7\u7cfb\u7edf\u3002SIMATIC IT Production Suite\u662f\u4e00\u5957\u5de5\u5382\u751f\u4ea7\u7ba1\u7406\u5957\u4ef6\u3002SIMATIC IT UA Discrete Manufacturing\u662f\u4e00\u5957\u4e3a\u5236\u9020\u4e1a\u63d0\u4f9b\u7ed3\u6784\u5316\u670d\u52a1\u7684\u89e3\u51b3\u65b9\u6848\u3002\n\nSiemens SIMATIC IT LMS\u3001SIMATIC IT Production Suite 7.1 Upd3\u4e4b\u524d\u76847.1\u7248\u672c\u548cSIMATIC IT UA Discrete Manufacturing 2.4\u4e4b\u524d\u7248\u672c\u4e2d\u5b58\u5728\u6388\u6743\u95ee\u9898\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u7ed5\u8fc7\u5e94\u7528\u7a0b\u5e8f\u7684\u8eab\u4efd\u9a8c\u8bc1\u68c0\u6d4b\uff0c\u5f71\u54cd\u7cfb\u7edf\u7684\u4fdd\u5bc6\u6027\u3001\u5b8c\u6574\u6027\u548c\u53ef\u7528\u6027\u3002",
  "discovererName": "Siemens",
  "formalWay": "\u76ee\u524d\u5382\u5546\u53ea\u53d1\u5e03\u4e86SIMATIC IT Production Suite\u7b49\u4ea7\u54c1\u7684\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u4ea7\u54c1SIMATIC IT LMS\u7684\u5347\u7ea7\u8865\u4e01\u6682\u672a\u53d1\u5e03\uff0c\u8be6\u60c5\u8bf7\u53c2\u8003\u94fe\u63a5\uff1a\r\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-944083.pdf",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-25912",
  "openTime": "2018-12-20",
  "patchDescription": "Siemens SIMATIC IT LMS\u3001SIMATIC IT Production Suite\u548cSIMATIC IT UA Discrete Manufacturing\u90fd\u662f\u5fb7\u56fd\u897f\u95e8\u5b50\uff08Siemens\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Siemens SIMATIC IT LMS\u662f\u4e00\u5957\u603b\u4f53\u8bbe\u5907\u6548\u80fd\uff08OEE\uff09\u7684\u7ebf\u8def\u76d1\u63a7\u7cfb\u7edf\u3002SIMATIC IT Production Suite\u662f\u4e00\u5957\u5de5\u5382\u751f\u4ea7\u7ba1\u7406\u5957\u4ef6\u3002SIMATIC IT UA Discrete Manufacturing\u662f\u4e00\u5957\u4e3a\u5236\u9020\u4e1a\u63d0\u4f9b\u7ed3\u6784\u5316\u670d\u52a1\u7684\u89e3\u51b3\u65b9\u6848\u3002\r\n\r\nSiemens SIMATIC IT LMS\u3001SIMATIC IT Production Suite 7.1 Upd3\u4e4b\u524d\u76847.1\u7248\u672c\u548cSIMATIC IT UA Discrete Manufacturing 2.4\u4e4b\u524d\u7248\u672c\u4e2d\u5b58\u5728\u6388\u6743\u95ee\u9898\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u7ed5\u8fc7\u5e94\u7528\u7a0b\u5e8f\u7684\u8eab\u4efd\u9a8c\u8bc1\u68c0\u6d4b\uff0c\u5f71\u54cd\u7cfb\u7edf\u7684\u4fdd\u5bc6\u6027\u3001\u5b8c\u6574\u6027\u548c\u53ef\u7528\u6027\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Siemens SIMATIC IT LMS\u3001SIMATIC IT Production Suite\u548cSIMATIC IT UA Discrete Manufacturing\u6388\u6743\u95ee\u9898\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Siemens SIMATIC IT LMS ALL",
      "Siemens SIMATIC IT UA Discrete Manufacturing \u003c2.4",
      "Siemens SIMATIC IT Production Suite 7.1.*\uff0c\u003c7.1 Upd3"
    ]
  },
  "referenceLink": "https://ics-cert.us-cert.gov/advisories/ICSA-18-317-07",
  "serverity": "\u9ad8",
  "submitTime": "2018-11-16",
  "title": "Siemens SIMATIC IT LMS\u3001SIMATIC IT Production Suite\u548cSIMATIC IT UA Discrete Manufacturing\u6388\u6743\u95ee\u9898\u6f0f\u6d1e"
}

CVE-2018-13804 (GCVE-0-2018-13804)

Vulnerability from cvelistv5 – Published: 2018-12-13 16:00 – Updated: 2024-08-05 09:14

Summary

A vulnerability has been identified in SIMATIC IT LMS (All versions), SIMATIC IT Production Suite (Versions V7.1 < V7.1 Upd3), SIMATIC IT UA Discrete Manufacturing (Versions < V1.2), SIMATIC IT UA Discrete Manufacturing (Versions V1.2), SIMATIC IT UA Discrete Manufacturing (Versions V1.3), SIMATIC IT UA Discrete Manufacturing (Versions V2.3), SIMATIC IT UA Discrete Manufacturing (Versions V2.4). An attacker with network access to the installation could bypass the application-level authentication. In order to exploit the vulnerability, an attacker must obtain network access to an affected installation and must obtain a valid username to the system. Successful exploitation requires no user privileges and no user interaction. The vulnerability could allow an attacker to compromise confidentiality, integrity and availability of the system. At the time of advisory publication no public exploitation of this vulnerability was known.

Severity

No CVSS data available.

CWE

CWE-287 - Improper Authentication

Assigner

siemens CNA under the icscert root

CNA scorecard C 65/100 over 88 records in the last 180 days details

References

2 references

URL	Tags
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/105924	vdb-entryx_refsource_BID

Impacted products

1 product

Vendor	Product	Version
Siemens AG	SIMATIC IT LMS, SIMATIC IT Production Suite, SIMATIC IT UA Discrete Manufacturing, SIMATIC IT UA Discrete Manufacturing, SIMATIC IT UA Discrete Manufacturing, SIMATIC IT UA Discrete Manufacturing, SIMATIC IT UA Discrete Manufacturing	Affected: SIMATIC IT LMS : All versions Affected: SIMATIC IT Production Suite : Versions V7.1 < V7.1 Upd3 Affected: SIMATIC IT UA Discrete Manufacturing : Versions < V1.2 Affected: SIMATIC IT UA Discrete Manufacturing : Versions V1.2 Affected: SIMATIC IT UA Discrete Manufacturing : Versions V1.3 Affected: SIMATIC IT UA Discrete Manufacturing : Versions V2.3 Affected: SIMATIC IT UA Discrete Manufacturing : Versions V2.4

Date Public

2018-12-13 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T09:14:47.168Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-886615.pdf"
          },
          {
            "name": "105924",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/105924"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "SIMATIC IT LMS, SIMATIC IT Production Suite, SIMATIC IT UA Discrete Manufacturing, SIMATIC IT UA Discrete Manufacturing, SIMATIC IT UA Discrete Manufacturing, SIMATIC IT UA Discrete Manufacturing, SIMATIC IT UA Discrete Manufacturing",
          "vendor": "Siemens AG",
          "versions": [
            {
              "status": "affected",
              "version": "SIMATIC IT LMS : All versions"
            },
            {
              "status": "affected",
              "version": "SIMATIC IT Production Suite : Versions V7.1 \u003c V7.1 Upd3"
            },
            {
              "status": "affected",
              "version": "SIMATIC IT UA Discrete Manufacturing : Versions \u003c V1.2"
            },
            {
              "status": "affected",
              "version": "SIMATIC IT UA Discrete Manufacturing : Versions V1.2"
            },
            {
              "status": "affected",
              "version": "SIMATIC IT UA Discrete Manufacturing : Versions V1.3"
            },
            {
              "status": "affected",
              "version": "SIMATIC IT UA Discrete Manufacturing : Versions V2.3"
            },
            {
              "status": "affected",
              "version": "SIMATIC IT UA Discrete Manufacturing : Versions V2.4"
            }
          ]
        }
      ],
      "datePublic": "2018-12-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in SIMATIC IT LMS (All versions), SIMATIC IT Production Suite (Versions V7.1 \u003c V7.1 Upd3), SIMATIC IT UA Discrete Manufacturing (Versions \u003c V1.2), SIMATIC IT UA Discrete Manufacturing (Versions V1.2), SIMATIC IT UA Discrete Manufacturing (Versions V1.3), SIMATIC IT UA Discrete Manufacturing (Versions V2.3), SIMATIC IT UA Discrete Manufacturing (Versions V2.4). An attacker with network access to the installation could bypass the application-level authentication. In order to exploit the vulnerability, an attacker must obtain network access to an affected installation and must obtain a valid username to the system. Successful exploitation requires no user privileges and no user interaction. The vulnerability could allow an attacker to compromise confidentiality, integrity and availability of the system. At the time of advisory publication no public exploitation of this vulnerability was known."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-287",
              "description": "CWE-287: Improper Authentication",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-12-14T10:57:02.000Z",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-886615.pdf"
        },
        {
          "name": "105924",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/105924"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "productcert@siemens.com",
          "ID": "CVE-2018-13804",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "SIMATIC IT LMS, SIMATIC IT Production Suite, SIMATIC IT UA Discrete Manufacturing, SIMATIC IT UA Discrete Manufacturing, SIMATIC IT UA Discrete Manufacturing, SIMATIC IT UA Discrete Manufacturing, SIMATIC IT UA Discrete Manufacturing",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "SIMATIC IT LMS : All versions"
                          },
                          {
                            "version_value": "SIMATIC IT Production Suite : Versions V7.1 \u003c V7.1 Upd3"
                          },
                          {
                            "version_value": "SIMATIC IT UA Discrete Manufacturing : Versions \u003c V1.2"
                          },
                          {
                            "version_value": "SIMATIC IT UA Discrete Manufacturing : Versions V1.2"
                          },
                          {
                            "version_value": "SIMATIC IT UA Discrete Manufacturing : Versions V1.3"
                          },
                          {
                            "version_value": "SIMATIC IT UA Discrete Manufacturing : Versions V2.3"
                          },
                          {
                            "version_value": "SIMATIC IT UA Discrete Manufacturing : Versions V2.4"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Siemens AG"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability has been identified in SIMATIC IT LMS (All versions), SIMATIC IT Production Suite (Versions V7.1 \u003c V7.1 Upd3), SIMATIC IT UA Discrete Manufacturing (Versions \u003c V1.2), SIMATIC IT UA Discrete Manufacturing (Versions V1.2), SIMATIC IT UA Discrete Manufacturing (Versions V1.3), SIMATIC IT UA Discrete Manufacturing (Versions V2.3), SIMATIC IT UA Discrete Manufacturing (Versions V2.4). An attacker with network access to the installation could bypass the application-level authentication. In order to exploit the vulnerability, an attacker must obtain network access to an affected installation and must obtain a valid username to the system. Successful exploitation requires no user privileges and no user interaction. The vulnerability could allow an attacker to compromise confidentiality, integrity and availability of the system. At the time of advisory publication no public exploitation of this vulnerability was known."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-287: Improper Authentication"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-886615.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-886615.pdf"
            },
            {
              "name": "105924",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/105924"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2018-13804",
    "datePublished": "2018-12-13T16:00:00.000Z",
    "dateReserved": "2018-07-10T00:00:00.000Z",
    "dateUpdated": "2024-08-05T09:14:47.168Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted