ID de Prueba:	1.3.6.1.4.1.25623.1.0.111057
Categoría:	Default Accounts
Título:	Siemens WinCC Microsoft SQL (MSSQL) Server Default Credentials (TCP/IP Listener)
Resumen:	The remote Microsoft SQL (MSSQL) Server has Siemens WinCC; related default credentials set.
Descripción:	Summary: The remote Microsoft SQL (MSSQL) Server has Siemens WinCC related default credentials set. Vulnerability Insight: It was possible to login with default credentials of 'WinCCAdmin/2WSXcde.' and/or 'WinCCConnect/2WSXcder'. Vulnerability Impact: An attacker can use these accounts to read and/or modify data on the Microsoft SQL Server. In addition, the attacker may be able to launch programs on the target operating system. Solution: Update to version 7.0 SP2 Update 1 (7.0.2.1) or later. CVSS Score: 6.9 CVSS Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2772 BugTraq ID: 41753 http://www.securityfocus.com/bid/41753 http://ics-cert.us-cert.gov/advisories/ICSA-12-205-01 http://infoworld.com/d/security-central/new-weaponized-virus-targets-industrial-secrets-725 http://infoworld.com/d/security-central/siemens-warns-users-dont-change-passwords-after-worm-attack-915?sourcefssr http://krebsonsecurity.com/2010/07/experts-warn-of-new-windows-shortcut-flaw/ http://www.automation.siemens.com/forum/guests/PostShow.aspx?PostID=16127&16127&Language=en&PageIndex=1 http://www.f-secure.com/weblog/archives/00001987.html http://www.wilderssecurity.com/showpost.php?p=1712134&postcount=22 http://www.wired.com/threatlevel/2010/07/siemens-scada/ http://secunia.com/advisories/40682 http://www.vupen.com/english/advisories/2010/1893 XForce ISS Database: simatic-wincc-default-password(60587) https://exchange.xforce.ibmcloud.com/vulnerabilities/60587
Copyright	Copyright (C) 2015 SCHUTZWERK GmbH

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.