Improper input validation in SIMATIC WinCC Open Architecture

2013-12-01T00:00:00
ID PT-2013-80
Type ptsecurity
Reporter Positive Technologies
Modified 2014-02-14T00:00:00

Description

PT-2013-80: Improper input validation in SIMATIC WinCC Open Architecture

Fix date:

                    February 3, 2014

Vector: Remote

Systems affected: Siemens SIMATIC WinCC Open Architecture 3.x

Vendor: Siemens

Notification status: 01.12.2013 - Vendor gets vulnerability details 03.02.2014 - Vendor releases fixed version and details 14.02.2014 - Public disclosure