Test Kennung:	1.3.6.1.4.1.25623.1.0.111057
Kategorie:	Default Accounts
Titel:	Siemens WinCC Microsoft SQL (MSSQL) Server Default Credentials (TCP/IP Listener)
Zusammenfassung:	The remote Microsoft SQL (MSSQL) Server has Siemens WinCC; related default credentials set.
Beschreibung:	Summary: The remote Microsoft SQL (MSSQL) Server has Siemens WinCC related default credentials set. Vulnerability Insight: It was possible to login with default credentials of 'WinCCAdmin/2WSXcde.' and/or 'WinCCConnect/2WSXcder'. Vulnerability Impact: An attacker can use these accounts to read and/or modify data on the Microsoft SQL Server. In addition, the attacker may be able to launch programs on the target operating system. Solution: Update to version 7.0 SP2 Update 1 (7.0.2.1) or later. CVSS Score: 6.9 CVSS Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2772 BugTraq ID: 41753 http://www.securityfocus.com/bid/41753 http://ics-cert.us-cert.gov/advisories/ICSA-12-205-01 http://infoworld.com/d/security-central/new-weaponized-virus-targets-industrial-secrets-725 http://infoworld.com/d/security-central/siemens-warns-users-dont-change-passwords-after-worm-attack-915?sourcefssr http://krebsonsecurity.com/2010/07/experts-warn-of-new-windows-shortcut-flaw/ http://www.automation.siemens.com/forum/guests/PostShow.aspx?PostID=16127&16127&Language=en&PageIndex=1 http://www.f-secure.com/weblog/archives/00001987.html http://www.wilderssecurity.com/showpost.php?p=1712134&postcount=22 http://www.wired.com/threatlevel/2010/07/siemens-scada/ http://secunia.com/advisories/40682 http://www.vupen.com/english/advisories/2010/1893 XForce ISS Database: simatic-wincc-default-password(60587) https://exchange.xforce.ibmcloud.com/vulnerabilities/60587
Copyright	Copyright (C) 2015 SCHUTZWERK GmbH

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.