NVD

Id
22292  
Name
CVE-2016-9154  
Description
Siemens Desigo PX Web modules PXA40-W0, PXA40-W1, PXA40-W2 for Desigo PX automation controllers PXC00-E.D, PXC50-E.D, PXC100-E.D, PXC200-E.D (All firmware versions < V6.00.046) and Desigo PX Web modules PXA30-W0, PXA30-W1, PXA30-W2 for Desigo PX automation controllers PXC00-U, PXC64-U, PXC128-U (All firmware versions < V6.00.046) use a pseudo random number generator with insufficient entropy to generate certificates for HTTPS, potentially allowing remote attackers to reconstruct the corresponding private key.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-12-23  
Modified Date
2016-12-30  
Seq
2016-9154  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
118612 22292 CVE-2016-9154 94962  View
118613 22292 CVE-2016-9154 http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-856492.pdf  View
118614 22292 CVE-2016-9154 https://ics-cert.us-cert.gov/advisories/ICSA-16-355-01  View

Related JVN