Executive Summary

Informations
Name CVE-2015-8214 First vendor Publication 2015-11-27
Vendor Cve Last vendor Modification 2021-04-22

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:C/A:C)
Cvss Base Score 9.7 Attack Range Network
Cvss Impact Score 9.5 Attack Complexity Low
Cvss Expoit Score 10 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

A vulnerability has been identified in SIMATIC NET CP 342-5 (incl. SIPLUS variants) (All versions), SIMATIC NET CP 343-1 Advanced (incl. SIPLUS variants) (All versions < V3.0.44), SIMATIC NET CP 343-1 Lean (incl. SIPLUS variants) (All versions < V3.1.1), SIMATIC NET CP 343-1 Standard (incl. SIPLUS variants) (All versions < V3.1.1), SIMATIC NET CP 443-1 Advanced (incl. SIPLUS variants) (All versions < V3.2.9), SIMATIC NET CP 443-1 Standard (incl. SIPLUS variants) (All versions < V3.2.9), SIMATIC NET CP 443-5 Basic (incl. SIPLUS variants) (All versions), SIMATIC NET CP 443-5 Extended (All versions), TIM 3V-IE / TIM 3V-IE Advanced (incl. SIPLUS NET variants) (All versions < V2.6.0), TIM 3V-IE DNP3 (incl. SIPLUS NET variants) (All versions < V3.1.0), TIM 4R-IE (incl. SIPLUS NET variants) (All versions < V2.6.0), TIM 4R-IE DNP3 (incl. SIPLUS NET variants) (All versions < V3.1.0). The implemented access protection level enforcement of the affected communication processors (CP) could possibly allow unauthenticated users to perform administrative operations on the CPs if network access (port 102/TCP) is available and the CPs' configuration was stored on their corresponding CPUs.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8214

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-264 Permissions, Privileges, and Access Controls

CPE : Common Platform Enumeration

TypeDescriptionCount
Os 8
Os 2
Os 3
Os 2

Sources (Detail)

Source Url
BID http://www.securityfocus.com/bid/78345
CONFIRM http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-763427.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-763427.pdf
SECTRACK http://www.securitytracker.com/id/1034279

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
Date Informations
2021-04-23 01:10:33
  • Multiple Updates
2021-04-22 12:04:00
  • Multiple Updates
2020-05-23 01:57:29
  • Multiple Updates
2020-05-23 00:47:27
  • Multiple Updates
2018-04-21 12:03:07
  • Multiple Updates
2016-12-07 21:24:57
  • Multiple Updates
2016-11-29 00:25:37
  • Multiple Updates
2016-11-24 12:03:28
  • Multiple Updates
2016-06-29 01:08:34
  • Multiple Updates
2015-12-02 17:27:43
  • First insertion