SB2017071402 - Two vulnerabilities in Siemens SIMATIC Sm@rtClient Android App

Description

This security bulletin contains information about 2 secuirty vulnerabilities.

1) Man-in-the-middle attack (CVE-ID: CVE-2017-6870)

The vulnerability allows a remote attacker to perform a man-in-the-middle attack.

The weakness exists due to an error when TLS protocol implementation. A remote attacker can conduct MITM attack to read and modify data within a TLS session.

2) Authentication bypass (CVE-ID: CVE-2017-6871)

The vulnerability allows a remote attacker to bypass authentication.

The weakness exists due to unknown error. A local attacker can use alternate path or channel to bypass the app’s authentication mechanism.

Remediation

Install update from vendor's website.

References

• https://ics-cert.us-cert.gov/advisories/ICSA-17-194-03
• https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-589378.pdf