VulnerabilityModified
CVE-2013-4912
Open redirect vulnerability in Siemens WinCC (TIA Portal) 11 and 12 before 12 SP1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks by leveraging improper configuration of SIMATIC HMI panels by the WinCC…
MEDIUM 5.8EPSS 2.07%
Does this matter?
Lower severity and a low EPSS score (2.07%). Track it; it rarely justifies an emergency change on its own.
Description
Open redirect vulnerability in Siemens WinCC (TIA Portal) 11 and 12 before 12 SP1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks by leveraging improper configuration of SIMATIC HMI panels by the WinCC product.
- CVSS 2.0
- 5.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N
- EPSS
- 2.07% probability · 80th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- siemens/wincc
- Source
- cve@mitre.org
References
- http://scadastrangelove.blogspot.com/2013/08/ssa-064884-wincctia-portal-fixes.html
- http://secunia.com/advisories/54051
- http://secunia.com/advisories/54252
- http://www.securityfocus.com/bid/61535
- http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-064884.pdfVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86100
- https://ics-cert.us-cert.gov/advisories/ICSA-13-213-02
- http://scadastrangelove.blogspot.com/2013/08/ssa-064884-wincctia-portal-fixes.html
- http://secunia.com/advisories/54051
- http://secunia.com/advisories/54252
- http://www.securityfocus.com/bid/61535
- http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-064884.pdfVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86100
- https://ics-cert.us-cert.gov/advisories/ICSA-13-213-02
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.