Siemens SIMATIC RF Manager ActiveX Buffer Overflow

🗓️ 18 Oct 2013 06:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 35 Views

Siemens SIMATIC RF Manager ActiveX Buffer Overflow vulnerability in SIMATIC RF Manager. Could lead to remote code execution or denial of service. Affects SIMATIC RF Manager 2008, and SIMATIC RF Manager Basic v3.0 and lower. Uses ActiveX shared with Internet browsers. Impact to critical manufacturing, health and healthcare, power generation and distribution, food and beverage, and chemical industries

Reporter	Title	Published	Views	Family All 7
CVE	CVE-2013-0656	21 Jan 201321:00	–	cve
Cvelist	CVE-2013-0656	21 Jan 201321:00	–	cvelist
EUVD	EUVD-2013-0667	7 Oct 202500:30	–	euvd
NVD	CVE-2013-0656	21 Jan 201321:55	–	nvd
Prion	Buffer overflow	21 Jan 201321:55	–	prion
RedhatCVE	CVE-2013-0656	22 May 202503:29	–	redhatcve
Tenable Nessus	Siemens SIMATIC RF-MANAGER KeyHelp.ocx Buffer Overflow	19 Feb 201300:00	–	nessus

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2013/icsa-13-014-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-13-014-01
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014

18 Oct 2013 06:00Current

8.6High risk

Vulners AI Score8.6

CVSS 26.8

EPSS0.02133