SSA-063511 V1.0: Insufficient protection of key material in WinCC Certificate Manager

Risk Summary

<p>WinCC Certificate Manager insufficiently protects key material that could allow an attacker to extract sensitive information.</p> <p>Siemens has released a new version for SIMATIC WinCC Unified PC Runtime V21 and recommends to update to the latest version. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.</p>

Remediations

• Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Affected Products (1)