CVE-2011-4508

Published: Feb 3, 2012Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime generates predictable authentication tokens for cookies, which makes it easier for remote attackers to bypass authentication via a crafted cookie.

Affected (16)

Products: Siemens: Wincc Flexible, Wincc, Simatic Hmi Panels, Wincc Runtime Advanced, Wincc Flexible Runtime

5 products

Wincc Runtime Advanced

Wincc Flexible Runtime

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Siemens Wincc Flexible	Version 2004
Siemens Wincc Flexible	Version 2005
Siemens Wincc Flexible	Version 2007
Siemens Wincc Flexible	Version 2008
Siemens Wincc Flexible	Version 2008 sp1
Siemens Wincc Flexible	Version 2008 sp2

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Siemens Wincc	Up to v11
Siemens Wincc	Version v11
Siemens Wincc	Version v11 sp1

Configuration C

5 vulnerable

Vulnerable Software	Affected Versions
Siemens Simatic Hmi Panels	Version comfort_panels
Siemens Simatic Hmi Panels	Version mobile_panels
Siemens Simatic Hmi Panels	Version mp
Siemens Simatic Hmi Panels	Version op
Siemens Simatic Hmi Panels	Version tp