By default, Siemens SIMATIC installs with a default password for accessing the SQL database. The 'WinCCConnect' and 'WinCCAdmin' accounts have a password of '2WSXcder' which is publicly known and documented. This allows attackers to trivially access the program or system.
Classification
Location:
Remote / Network Access
Attack Type:
Authentication Management
Impact:
Loss of Integrity
Solution:
Upgrade
Exploit:
Exploit Public
Disclosure:
Vendor Verified,
Uncoordinated Disclosure,
Discovered in the Wild
OSVDB:
SCADA
Solution
It has been reported that this issue has been fixed. Upgrade to version 7.0 SP2 Update 1, or higher, to address this vulnerability.
