Vulnerability Details : CVE-2017-12069
An XXE vulnerability has been identified in OPC Foundation UA .NET Sample Code before 2017-03-21 and Local Discovery Server (LDS) before 1.03.367. Among the affected products are Siemens SIMATIC PCS7 (All versions V8.1 and earlier), SIMATIC WinCC (All versions < V7.4 SP1), SIMATIC WinCC Runtime Professional (All versions < V14 SP1), SIMATIC NET PC Software, and SIMATIC IT Production Suite. By sending specially crafted packets to the OPC Discovery Server at port 4840/tcp, an attacker might cause the system to access various resources chosen by the attacker.
Vulnerability category: XML external entity (XXE) injection
Products affected by CVE-2017-12069
- cpe:2.3:a:siemens:wincc:*:*:*:*:*:*:*:*
- cpe:2.3:a:siemens:simatic_pcs7:*:*:*:*:*:*:*:*
- cpe:2.3:a:ocpfoundation:ua_.net:*:*:*:*:*:*:*:*
- cpe:2.3:a:ocpfoundation:local_discovery_server:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2017-12069
0.94%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 75 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2017-12069
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
6.4
|
MEDIUM | AV:N/AC:L/Au:N/C:P/I:N/A:P |
10.0
|
4.9
|
NIST | |
|
8.2
|
HIGH | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H |
3.9
|
4.2
|
NIST |
CWE ids for CVE-2017-12069
-
The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.Assigned by: nvd@nist.gov (Primary)
References for CVE-2017-12069
-
http://www.securitytracker.com/id/1039510
Siemens SIMATIC WinCC OPC Discovery Service Bug Lets Remote Users Cause Denial of Service Attacks - SecurityTracker
-
http://www.securityfocus.com/bid/100559
Multiple Siemens Products CVE-2017-12069 XML External Entity Injection VulnerabilityThird Party Advisory;VDB Entry
-
https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-535640.pdf
Vendor Advisory
-
https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2017-12069.pdf
Patch;Vendor Advisory
Jump to