NVD Vulnerability Detail

CVE-2011-4875

Summary	Stack-based buffer overflow in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is enabled, allows remote attackers to execute arbitrary code via vectors related to Unicode strings.
Publication Date	Feb. 4, 2012, 5:55 a.m.
Registration Date	Jan. 28, 2021, 4:39 p.m.
Last Update	Nov. 21, 2024, 10:33 a.m.

Affected software configurations

Configuration2		or higher	or less	more than	less than
cpe:2.3:a:siemens:wincc:v11:::::::*

Configuration3	or higher	or less	more than	less than
cpe:2.3:a:siemens:simatic_hmi_panels:tp:::::::*
cpe:2.3:a:siemens:simatic_hmi_panels:op:::::::*
cpe:2.3:a:siemens:simatic_hmi_panels:mobile_panels:::::::*
cpe:2.3:a:siemens:simatic_hmi_panels:comfort_panels:::::::*
cpe:2.3:a:siemens:simatic_hmi_panels:mp:::::::*

Configuration4		or higher	or less	more than	less than
cpe:2.3:a:siemens:wincc_runtime_advanced:v11:::::::*

Configuration5		or higher	or less	more than	less than
cpe:2.3:a:siemens:wincc_flexible_runtime::::::::

Related information, measures and tools

No	URL	タグ
1	http://aluigi.org/adv/winccflex_1-adv.txt
2	http://www.exploit-db.com/exploits/18166
3	http://www.osvdb.org/77380
4	http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345442.pdf	Vendor Advisory
5	http://www.us-cert.gov/control_systems/pdf/ICSA-12-030-01.pdf	US Government Resource
6	http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-332-02.pdf
7	http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-332-02A.pdf
8	https://exchange.xforce.ibmcloud.com/vulnerabilities/71449
9	http://aluigi.org/adv/winccflex_1-adv.txt
10	https://exchange.xforce.ibmcloud.com/vulnerabilities/71449
11	http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-332-02A.pdf
12	http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-332-02.pdf
13	http://www.us-cert.gov/control_systems/pdf/ICSA-12-030-01.pdf	US Government Resource
14	http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345442.pdf	Vendor Advisory
15	http://www.osvdb.org/77380
16	http://www.exploit-db.com/exploits/18166

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-119	バッファエラー	https://cwe.mitre.org/data/definitions/118.html

JVN Vulnerability Information

複数の Siemens 製品の HmiLoad におけるスタックベースのバッファオーバーフローの脆弱性

Title	複数の Siemens 製品の HmiLoad におけるスタックベースのバッファオーバーフローの脆弱性
Summary	複数の Siemens 製品のランタイムローダーの HmiLoad には、Unicode 文字列に関する処理に不備があるため、Transfer モードが有効であるとき、スタックベースのバッファオーバーフローの脆弱性が存在します。
Possible impacts	第三者により、任意のコードを実行される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Jan. 24, 2012, midnight
Registration Date	Feb. 8, 2012, 11:06 a.m.
Last Update	Feb. 8, 2012, 11:06 a.m.

Affected System

シーメンス

SIMATIC HMI Panels Comfort Panels

SIMATIC HMI Panels Mobile Panels

SIMATIC HMI Panels MP

SIMATIC HMI Panels OP

SIMATIC HMI Panels TP

SIMATIC WinCC (TIAポータル) V11

SIMATIC WinCC Flexible 2004

SIMATIC WinCC Flexible 2005

SIMATIC WinCC Flexible 2007

SIMATIC WinCC Flexible 2008

SIMATIC WinCC Flexible Rumtime

SIMATIC WinCC Runtime Advanced V11

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2011-4875	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4875
National Vulnerability Database (NVD)
2	CVE-2011-4875	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-4875

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-119	https://jvndb.jvn.jp/ja/cwe/CWE-119.html

ベンダー情報

No	Name	URL
Siemens Security Advisory
1	SSA-345442	http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345442.pdf
パートナー一覧
2	ソリューションパートナー	http://www.automation.siemens.com/automation/jp/ja/solutionpartner/pages/default.aspx
日本法人
3	Top Page	http://www.siemens.com/entry/jp/ja/

その他

No	Name	URL
ICS-CERT ADVISORY
1	ICSA-12-030-01	http://www.us-cert.gov/control_systems/pdf/ICSA-12-030-01.pdf

Change Log

No	Changed Details	Date of change
0	[2012年02月08日] 掲載	Feb. 17, 2018, 10:37 a.m.