PT-2013-87: Insuffient Entropy in Siemens SIMATIC S7-1200 CPU PLC

The specialists of the Positive Research center have detected an Insuffient Entropy vulnerability in Siemens SIMATIC S7-1200 CPU PLC. Due to low entropy in its random number generator, the integrated web server’s authentication method port 80/tcp and port 443/tcp could allow attackers to hijack w...

Oracle Linux 4 : firefox (ELSA-2010-0500)

From Red Hat Security Advisory 2010:0500 : An updated firefox package that addresses security issues, fixes bugs, adds numerous enhancements, and upgrades Firefox to version 3.6.4, is now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having...

CVE-2013-1200

Cisco Secure Access Control System (ACS) is affected by a session fixation vulnerability tied to the lack of session identifier regeneration. An unauthenticated, remote attacker could hijack another user’s web session by capturing or reusing an existing session ID. The issue is documented as CVE-...

Siemens SIMATIC S7-1200 Multiple DoS Vulnerabilities (SSA-724606)

Siemens SIMATIC S7-1200 devices are prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CP...

CVE-2013-2780

Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service defect-mode transition and control outage via crafted packets to UDP port 161 aka the SNMP port...

CVE-2013-0700

Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service defect-mode transition and control outage via crafted packets to TCP port 102 aka the ISO-TSAP port...

Code injection

Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service defect-mode transition and control outage via crafted packets to TCP port 102 aka the ISO-TSAP port...

Code injection

Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service defect-mode transition and control outage via crafted packets to UDP port 161 aka the SNMP port...

CVE-2013-2780

CVE-2013-2780 affects Siemens SIMATIC S7-1200 PLCs (2.x and 3.x). The vulnerability permits remote DoS by sending specially crafted packets to UDP port 161 (SNMP), causing a defect-mode transition and control outage. The NVD entry assigns CVSS v2 base score 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C). Explo...

CVE-2013-0700

Siemens SIMATIC S7-1200 PLC family (2.x/3.x) is affected by CVE-2013-0700, a denial-of-service vulnerability triggered by specially crafted packets to TCP port 102 (ISO-TSAP). The issue is a remote DoS that can force defect-mode transitions and control outages. Affected software components are th...

CVE-2013-2780

Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service defect-mode transition and control outage via crafted packets to UDP port 161 aka the SNMP port...

CVE-2013-0700

Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service defect-mode transition and control outage via crafted packets to TCP port 102 aka the ISO-TSAP port...

PT-2013-88: Denial of Service in Siemens SIMATIC S7-1200 CPU PLC

The specialists of the Positive Research center have detected a Denial of Service vulnerability in Siemens SIMATIC S7-1200 CPU PLC. An attacker could cause the device to go into defect mode if specially crafted PROFINET packets are sent to the device. A cold restart is required to recover the...

Siemens SIMATIC S7-1200 controllers DoS

Malformed data to TCP/102 port causes device to crash...

DoS vulnerability in Siemens S7-1200 PLCs

Hi all, I have found a DoS vulnerability in the Siemens S7-1200 PLCs. It is present in firmware versions 2 and 3. After an exchange of specially crafted packets to TCP port 102 the PLC shuts down. The red, green and yellow status LEDs start flashing. All outputs are shut off. The device stops...

Cross site scripting

Cross-site scripting XSS vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x through 3.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URI...

CVE-2012-3040

CVE-2012-3040 affects Siemens SIMATIC S7-1200 PLCs (web server) 2.x–3.0.1. The root cause is improper input neutralization in the web application (CWE-79), allowing remote attackers to inject arbitrary web script or HTML via a crafted URI. Impact described as enabling attacker-controlled JavaScri...

CVE-2012-3040

Cross-site scripting XSS vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x through 3.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URI...

Siemens SIMATIC S7-1200 PLC Detection

Detection of Siemens SIMATIC S7-1200 PLC. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Siemens SIMATIC S7-1200 PLC 'web server' Component XSS Vulnerability (SSA-279823)

Siemens SIMATIC S7-1200 devices are prone to a cross-site scripting XSS vulnerability because they fail to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...