A vulnerability has been identified in Cerberus DMS (All versions), Desigo CC (All versions), Desigo CC Compact (All versions), SIMATIC WinCC OA V3.16 (All versions in default configuration), SIMATIC WinCC OA V3.17 (All versions in non-default configuration), SIMATIC WinCC OA V3.18 (All versions in non-default configuration). Affected applications use client-side only authentication, when neither server-side authentication (SSA) nor Kerberos authentication is enabled. In this configuration, attackers could impersonate other users or exploit the client-server protocol without being authenticated.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Cerberus DMS
Vendor
Siemens
Product
Cerberus DMS
Platforms
Unknown
Default status
Unknown
Cerberus DMS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions
affected
Unavailable
Unavailable
Unavailable
None listed
Desigo CC
Vendor
Siemens
Product
Desigo CC
Platforms
Unknown
Default status
Unknown
Desigo CC · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions
affected
Unavailable
Unavailable
Unavailable
None listed
Desigo CC Compact
Vendor
Siemens
Product
Desigo CC Compact
Platforms
Unknown
Default status
Unknown
Desigo CC Compact · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions
affected
Unavailable
Unavailable
Unavailable
None listed
SIMATIC WinCC OA V3.16
Vendor
Siemens
Product
SIMATIC WinCC OA V3.16
Platforms
Unknown
Default status
Unknown
SIMATIC WinCC OA V3.16 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions in default configuration
affected
Unavailable
Unavailable
Unavailable
None listed
SIMATIC WinCC OA V3.17
Vendor
Siemens
Product
SIMATIC WinCC OA V3.17
Platforms
Unknown
Default status
Unknown
SIMATIC WinCC OA V3.17 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions in non-default configuration
affected
Unavailable
Unavailable
Unavailable
None listed
SIMATIC WinCC OA V3.18
Vendor
Siemens
Product
SIMATIC WinCC OA V3.18
Platforms
Unknown
Default status
Unknown
SIMATIC WinCC OA V3.18 · Scoped product and version facts