Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 23/04/2018 Updated: 03/10/2019

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 4.6 | Impact Score: 3.6 | Exploitability Score: 0.9

VMScore: 187

Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

A vulnerability has been identified in SIMATIC WinCC OA Operator iOS App (All versions < V1.4). Insufficient protection of sensitive information (e.g. session key for accessing server) in Siemens WinCC OA Operator iOS app could allow an attacker with physical access to the mobile device to read unencrypted data from the app's directory. Siemens provides mitigations to resolve the security issue.

Vulnerable Product	Search on Vulmon	Subscribe to Product
siemens simatic wincc oa operator -

Hi there 👋 My name is Ivan, or Steph I do security trainings, researches, and, from time to time, some bughunting, pentests, and other security stuff ⚡ Fun fact: I'm not a cat Contacts Twitter: @w34kp455 Telegram: zzzteph Discord: discordgg/eEEWHPyEVp LinkedIn: ivan iushkevich Projects For any kind of bruteforce find wordlists weakpasscom

CWE-311 https://cert-portal.siemens.com/productcert/pdf/ssa-597741.pdf http://www.securityfocus.com/bid/103941 https://nvd.nist.gov https://github.com/zzzteph/zzzteph

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2018-4847

Vulnerability Summary

Github Repositories

References

Vulmon Search

About

Products

Connect