Headline
CVE-2021-40363
A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC WinCC V15 and earlier (All versions < V15 SP1 Update 7), SIMATIC WinCC V16 (All versions < V16 Update 5), SIMATIC WinCC V17 (All versions < V17 Update 2), SIMATIC WinCC V17 (All versions <= V17 Update 4), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 19), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 6). The affected component stores the credentials of a local system account in a potentially publicly accessible project file using an outdated cipher algorithm. An attacker may use this to brute force the credentials and take over the system.
%PDF-1.5 %���� 1 0 obj << /D [2 0 R /XYZ 70.866 771.024 null] >> endobj 3 0 obj << /D [2 0 R /XYZ 70.866 630.026 null] >> endobj 4 0 obj << /D [2 0 R /XYZ 70.866 557.991 null] >> endobj 5 0 obj << /D [6 0 R /XYZ 70.866 485.303 null] >> endobj 7 0 obj << /D [6 0 R /XYZ 70.866 367.443 null] >> endobj 8 0 obj << /D [9 0 R /XYZ 85.039 422.953 null] >> endobj 10 0 obj << /D [9 0 R /XYZ 70.866 223.561 null] >> endobj 11 0 obj << /S /GoTo /D [2 0 R /Fit] >> endobj 2 0 obj << /Contents 12 0 R /Type /Page /Resources 13 0 R /Parent 14 0 R /Annots [15 0 R 16 0 R 17 0 R 18 0 R 19 0 R 20 0 R 21 0 R 22 0 R 23 0 R 24 0 R 25 0 R 26 0 R 27 0 R 28 0 R 29 0 R] /Rotate 0 /MediaBox [0 0 595.28 841.89] >> endobj 15 0 obj << /A << /S /URI /Type /Action /URI (https://support.industry.siemens.com/cs/ww/en/view/109806846/) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [303.117 446.564 518.276 457.981] >> endobj 17 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [302.649 409.209 433.497 421.886] >> endobj 18 0 obj << /A << /S /URI /Type /Action /URI (https://support.industry.siemens.com/cs/ww/en/view/109780528/) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [303.117 368.658 518.276 380.075] >> endobj 20 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [302.649 331.303 433.497 343.981] >> endobj 21 0 obj << /A << /S /URI /Type /Action /URI (https://support.industry.siemens.com/cs/ww/en/view/109805073/) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [303.117 302.708 518.276 314.125] >> endobj 23 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [302.649 265.353 433.497 278.03] >> endobj 24 0 obj << /A << /S /URI /Type /Action /URI (https://support.industry.siemens.com/cs/ww/en/view/109806846/) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [303.117 236.757 518.276 248.174] >> endobj 26 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [302.649 199.402 433.497 212.079] >> endobj 27 0 obj << /A << /S /URI /Type /Action /URI (https://support.industry.siemens.com/cs/ww/en/view/109793460/) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [303.117 170.806 518.276 182.223] >> endobj 29 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [302.649 133.451 433.497 146.129] >> endobj 30 0 obj << /A << /S /URI /Type /Action /URI (https://support.industry.siemens.com/cs/us/en/view/109763890/) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [303.117 732.465 518.276 743.882] >> endobj 31 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [302.649 695.11 433.497 707.788] >> endobj 32 0 obj << /A << /S /URI /Type /Action /URI (https://support.industry.siemens.com/cs/ww/en/view/109776017/) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [303.117 666.515 518.276 677.932] >> endobj 33 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [302.649 629.16 433.497 641.837] >> endobj 34 0 obj << /A << /S /URI /Type /Action /URI (https://support.industry.siemens.com/cs/ww/en/view/109784441/) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [303.117 600.564 518.276 611.981] >> endobj 35 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [302.649 563.209 433.497 575.886] >> endobj 36 0 obj << /A << /S /URI /Type /Action /URI (https://support.industry.siemens.com/cs/ww/en/view/109784441/) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [303.117 534.613 518.276 546.03] >> endobj 37 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [302.649 497.258 433.497 509.936] >> endobj 13 0 obj << /ProcSet [/PDF /Text] /Font << /F71 38 0 R /F68 39 0 R >> >> endobj 12 0 obj << /Filter /FlateDecode /Length 2266 >> stream xڽZ�n�F}�W�V��_��xf��e;X$y�H�-D��$5��}�/�H���P2� �&�������m��)��.~����,ud��TF��Ha����1H�O����,}I�`H��G�x� �Dij�o��|��Khd8M�t{_�~�-'�qq��n_����������/8�#�s@ �H4~���OM���F����}�q��������8��Vl��k�fSsdߚt�Q$"�T9A� �� ] ���a? ""���� ��v� )!�N6 ‘�=kLiZ��f=/f�y��>%Q�)y IiܧT"�-��u��֘�O��@�x=_�Y�m6��4ߏ�Q��}"aT�\�N�I�V�-k�IV�d�hp�c$�����\!� ������q0fD A�/7W%��z?�R�3�dC����Np���mp(5Jk�6[\7�J�d�%0tB��H)���^��j:��b�xj$UG��p�6>���B��/P?���9��+�)�2.GL�&ꃙR@�L�5f,��}o.�P7Z�@�E�b�����Q `9-^����v)��=e�N3ȕ������o3+�$��]_�k�dHl)��T d�ޘ��I1[.������$�ӘbJ���v0<�H�w�%���a5�"$��Cl�z]��,]��� �0:��D��� ���q4��Z��~J�4���2�()b� 4��dIf�o��Q�M��%��7b�����n p�?;x-���YU�I�b���KYG�f�w�$[b�-���Ư�����t�H�\/&�q��WW��RW���3��P<’�o�#�������r=���|9 ��E��-P�Pbg�7K��"��j��*��a�٩��T�a^A��п���"���Yf��J�ܶ�З�ķ>’�s�q���x��q����?�"}�0�� �K �f�wh�����Q�S@��7��ë通��x���’H��L �ҷ’S��4��WY�_g�G�/_��Ix���~�j��֛ DR=�F�����k��BN���R�P��p]e�* ��k��m�qH0`j�x�〛J�������?��3!�H�:ۘظ�c�2���� 1\\�Ͼ0`�wYTlZ��_ٶ�����N�Cb\���<��n���*�2�j_�42�u :���<�������� ,5�f����ףMڊ��u JB�6-&j�����}��p}?j��0X�{``w�X��W�5�%�%�׆�S��>nS�I;Y V�涵Ņ��=��������6����HsY��>�|D@ip�D6`�5� i3k��x��������rW9��#�<�m�Ԟ*���,���#�M�K�:�y� lK�[�t�9�ي�ڊ�h��]�E��vO6 ^ϝ j�>����&���;X7&3/ ���(� �=�q �"�l�ڰ����X�G�$�5�T�ճ)Q9 �fQu� X���c2���?7��G��h4BMU<_��A;�W��ơ���-��-x6��e��"/��$d�h�����}T��;�n�oz����ˬ"���2f�� j�R�����˦��6�� �ڂx.�U���2_�V�8���-&�p���1ʃ�">��϶�!�b���j��yo>�f��������+f*a�D?B�k��G’ *,=��as�lt�9����J��˒��p��l�_�K#?����A��2((#���oƀ���b���W���z�E?���MR��-���Ց-�y�Bl���W�