FACTORYLINK SOFTWARE DOWNLOAD INSTALL
FACTORYLINK SOFTWARE DOWNLOAD PATCH

No publicly known exploits specifically target this vulnerability. This decreases the likelihood of a successful exploit. Social engineering is required to convince the user to go to a manipulated website. This vulnerability is remotely exploitable. SiemensвЂ™ assessment of the vulnerability using the CVSS Version 2.0 calculator rates an Overall CVSS Score of 7.7. This vulnerability is exploited by inputting a long string to a specific parameter causing a buffer overflow that could allow the execution of arbitrary code.Д¬VE-2011-4055 has been assigned to this vulnerability.

2 Mitigation Vulnerability Characterization Buffer Overflow Vulnerability Overview Siemens has announced that FactoryLink is now considered a mature product and will not offer FactoryLink after December 2012. FactoryLink is used to build applications such as human-machine interface systems.ДЇactoryLink is implemented across a variety of industrial processes including oil and gas, chemicals, food and beverage, and building automation. Siemens Tecnomatix FactoryLink software is used for monitoring and controlling industrial processes. ICS-CERT recommends that organizations evaluate the impact of this vulnerability based on their operational environment, architecture, and product implementation. Impact to individual organizations depends on many factors that are unique to each organization. Successful exploitation of the reported vulnerabilities could allow an attacker to perform malicious activities including denial of service and arbitrary code execution. The following Siemens Tecnomatix FactoryLink versions are affected:

FACTORYLINK SOFTWARE DOWNLOAD PATCH

ICS-CERT has confirmed that the Siemens patch resolves the reported vulnerabilities. ICS-CERT has coordinated with Siemens Siemens has released a patch that addresses the identified vulnerabilities. The report included buffer overflow and data corruption vulnerabilities. Researcher Kuang-Chun Hung of TaiwanвЂ™s Information and Communication Security Technology Center (ICST) has identified two vulnerabilities affecting ActiveX components in the Siemens Tecnomatix FactoryLink application.

FACTORYLINK SOFTWARE DOWNLOAD INSTALL

This web page release was delayed to allow users time to download and install the update. ICS-CERT originally released Advisory ICSA-11-343-01P on the US-CERT secure portal on December 09, 2011.

Factorylink Software Download