SSA-984700 (Last Update: 2019-10-08): Password Storage Vulnerability in SIMATIC IT UADM

Risk Summary

<p>A vulnerability has been identified in the SIMATIC IT Unified Architecture Discrete Manufacturing product that caused a password to be encrypted with a predicable encryption key. An authenticated attacker could potentially recover the password and gain access to the TeamCenter station connected to the instance.</p> <p>Siemens provides updates to address the vulnerability, and recommends specific mitigations.</p>

Remediations

• Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Affected Products (1)