Siemens SIMATIC WinCC

ソフト名：Siemens SIMATIC WinCC Flexible 2005/Flexible 2007/Flexible 2008/TIA Portal 11.x

回避策：未対応

脆弱性：システムアクセス, バッファオーバーフロー, リモートコード実行

ソース：

http://www.automation.siemens.com/mcms/human-machine-interface/en/visualization-software/wincc-flexible/Pages/Default.aspx

http://www.automation.siemens.com/mcms/automation-software/en/tia-portal-software/hmi-sw-tia-portal/wincc-tia-portal-es/Pages/Default.aspx

http://support.automation.siemens.com/WW/llisapi.dll?func=cslib.csinfo&lang=de&objid=29054992&caller=view

http://cache.automation.siemens.com/dnl/jI/jI0NDY5AAAA_29054992_FAQ/Siemens_Security_Advisory_SSA-460621_V1_2.pdf

http://www.us-cert.gov/control_systems/pdf/ICSA-11-244-01.pdf

http://secunia.com/advisories/46011/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3321

CVE：CVE-2011-3321

危険性：Medium Risk