Siemens Simatic Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability has been identified in SIMATIC S7-300 CPU family All versions, SIMATIC S7-300 CPU family incl. related ET200 CPUs and SIPLUS variants All versions, SIMATIC S7-400 PN/DP V6 and below CPU family incl. SIPLUS variants All versions, SIMATIC S7-400 PN/DP V7 CPU family incl. SIPLUS...

SIMATICS7-1200 and SIMATICS7-1500CPU families Man-in-the-Middle Attack Vulnerability

The Simatic S7-1200 CPU and Simatic S7-1500 CPU families are used for discrete and continuous control in industrial environments, such as manufacturing, food and beverage, and the chemical industry. A man-in-the-middle attack vulnerability exists in the SIMATICS7-1200 and SIMATICS7-1500 CPU...

CVE-2019-10929

A vulnerability has been identified in SIMATIC CP 1626 All versions, SIMATIC ET 200SP Open Controller CPU 1515SP PC incl. SIPLUS variants All versions, SIMATIC ET 200SP Open Controller CPU 1515SP PC2 incl. SIPLUS variants All versions V20.8, SIMATIC HMI Panel incl. SIPLUS variants All versions,...

CVE-2019-10929

A vulnerability has been identified in SIMATIC CP 1626 All versions, SIMATIC ET 200SP Open Controller CPU 1515SP PC incl. SIPLUS variants All versions, SIMATIC ET 200SP Open Controller CPU 1515SP PC2 incl. SIPLUS variants All versions V20.8, SIMATIC HMI Panel incl. SIPLUS variants All versions,...

Design/Logic Flaw

A vulnerability has been identified in SIMATIC CP 1626 All versions, SIMATIC ET 200SP Open Controller CPU 1515SP PC incl. SIPLUS variants All versions, SIMATIC ET 200SP Open Controller CPU 1515SP PC2 incl. SIPLUS variants All versions V20.8, SIMATIC HMI Panel incl. SIPLUS variants All versions,...

CVE-2019-10929

CVE-2019-10929 affects Siemens SIMATIC products (S7-1200/1500 families, ET200SP Open Controllers, HMI/WinCC/STEP 7, TIM 1531 IRC, etc.). The flaw is a message protection bypass caused by properties in the integrity-protection calculation, enabling a man-in-the-middle attacker with network access ...

CVE-2019-10929

A vulnerability has been identified in SIMATIC CP 1626 All versions, SIMATIC ET 200SP Open Controller CPU 1515SP PC incl. SIPLUS variants All versions, SIMATIC ET 200SP Open Controller CPU 1515SP PC2 incl. SIPLUS variants All versions V20.8, SIMATIC HMI Panel incl. SIPLUS variants All versions,...

CVE-2019-10929: Use of a Broken or Risky Cryptographic Algorithm

A vulnerability has been identified in SIMATIC CP 1626 All versions, SIMATIC ET 200SP Open Controller CPU 1515SP PC incl. SIPLUS variants All versions, SIMATIC ET 200SP Open Controller CPU 1515SP PC2 incl. SIPLUS variants All versions V20.8, SIMATIC HMI Panel incl. SIPLUS variants All versions,...

CVE-2016-10832

cPanel before 55.9999.141 allows FTP cPHulk bypass via account name munging SEC-102...

CVE-2016-10832

CVE-2016-10832 affects cPanel prior to 55.9999.141. The vulnerability is an FTP cPHulk bypass via account name munging (SEC-102), enabling bypass of FTP authentication checks. Root cause: improper handling during the cPHulk workflow allows bypass when munging the account name. Impact: potential u...

CVE-2018-16563

A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module All versions V4.35, Firmware variant MODBUS TCP for EN100 Ethernet module All versions, Firmware variant DNP3 TCP for EN100 Ethernet module All versions, Firmware variant IEC104 for EN100 Ethernet module A...

CVE-2018-16563: Undefined Security Weakness

A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module All versions V4.35, Firmware variant MODBUS TCP for EN100 Ethernet module All versions, Firmware variant DNP3 TCP for EN100 Ethernet module All versions, Firmware variant IEC104 for EN100 Ethernet module A...

Siemens Simatic S7-400 PLC DoS

The vulnerability of microprogrammed programmable logic controllers from Siemens Simatic S7-400 is related to errors in the validation of input data by Ethernet, PROFIBUS, and MPI interfaces. Exploiting this vulnerability can allow an attacker to cause malfunctions in the system by sending a...

Siemens Communication Module DoS

The vulnerability of Siemens’ communication module’s microprogramming software is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to cause malfunctions in the module by sending specially crafted packets to port 102/TCP...

Siemens Communication Module DoS

The vulnerability of Siemens’ communication module’s microprogramming software is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to cause malfunctions in the module by sending specially crafted packets to port 102/TCP...

IEC 61850-MMS Protocol Processor DoS

The vulnerability of the IEC 61850-MMS protocol processor in Siemens’ micro-programmed network equipment is related to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending specially crafted packets to port...

PT-2019-1396

Name of the Vulnerable Software and Affected Versions Firmware variant IEC 61850 for EN100 Ethernet module versions prior to V4.35 Firmware variant MODBUS TCP for EN100 Ethernet module all versions Firmware variant DNP3 TCP for EN100 Ethernet module all versions Firmware variant IEC104 for EN100...

ICSA-19-043-02 Siemens EN100 Ethernet Communication Module and SIPROTEC 5 Relays

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: EN100 Ethernet Communication Module and SIPROTEC 5 Relays Vulnerability: Improper Input Validation 2. RISK EVALUATION The EN100 Ethernet communication module and SIPROTEC 5...

Siemens Sinumerik PLC Exception Handling DoS

The vulnerability of Siemens Sinumerik programmable logic controllers is related to an exception handling error. Exploiting this vulnerability can allow an attacker to cause a failure in the embedded network interface controller or enable the execution of arbitrary code within the network interfa...

Siemens TIM Switching Module Authentication Bypass

The vulnerability of Siemens TIM’s communication module’s microprogramming software is related to the lack of authentication for the critical network service function at port 102/TCP. Exploiting this vulnerability allows a perpetrator to perform arbitrary administrative operations...