10
CVE-2011-4514
- EPSS 0.55%
- Published 03.02.2012 20:55:01
- Last modified 11.04.2025 00:51:21
- Source cret@cert.org
- Teams watchlist Login
- Open Login
The TELNET daemon in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime does not perform authentication, which makes it easier for remote attackers to obtain access via a TCP session.
Data is provided by the National Vulnerability Database (NVD)
Siemens ≫ Wincc Flexible Version2004
Siemens ≫ Wincc Flexible Version2005
Siemens ≫ Wincc Flexible Version2007
Siemens ≫ Wincc Flexible Version2008
Siemens ≫ Simatic Hmi Panels Versioncomfort_panels
Siemens ≫ Simatic Hmi Panels Versionmobile_panels
Siemens ≫ Simatic Hmi Panels Versionmp
Siemens ≫ Simatic Hmi Panels Versionop
Siemens ≫ Simatic Hmi Panels Versiontp
Siemens ≫ Wincc Runtime Advanced Versionv11
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.55% | 0.653 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.