39 matches found
Siemens SINUMERIK 828D 6FC5370-8AA40-0BA0 HMI Detection
Binary data 765344.prm...
Siemens SINUMERIK 828D 6FC5370-6AA30-0AA1 HMI Detection
Binary data 765338.prm...
Siemens SINUMERIK 828D 6FC5370-5AA40-0WA0 HMI Detection
Binary data 765337.prm...
Race condition
A vulnerability has been identified in SIMATIC S7-400 CPU 414-3 PN/DP V7, SIMATIC S7-400 CPU 414F-3 PN/DP V7, SIMATIC S7-400 CPU 416-3 PN/DP V7, SIMATIC S7-400 CPU 416F-3 PN/DP V7, Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller, Development/Evaluation Kits for PROFIN...
CVE-2018-11457
A vulnerability has been identified in SINUMERIK 828D V4.7 All versions V4.7 SP6 HF1, SINUMERIK 840D sl V4.7 All versions V4.7 SP6 HF5, SINUMERIK 840D sl V4.8 All versions V4.8 SP3. The integrated web server on port 4842/tcp of the affected products could allow a remote attacker to execute code...
Design/Logic Flaw
A vulnerability has been identified in SINUMERIK 828D V4.7 All versions V4.7 SP6 HF1, SINUMERIK 840D sl V4.7 All versions V4.7 SP6 HF5, SINUMERIK 840D sl V4.8 All versions V4.8 SP3. The integrated VNC server on port 5900/tcp of the affected products could allow a remote attacker to cause a...
Code injection
A vulnerability has been identified in SINUMERIK 828D V4.7 All versions V4.7 SP6 HF1, SINUMERIK 840D sl V4.7 All versions V4.7 SP6 HF5, SINUMERIK 840D sl V4.8 All versions V4.8 SP3. The integrated web server on port 4842/tcp of the affected products could allow a remote attacker to execute code...
Design/Logic Flaw
A vulnerability has been identified in SINUMERIK 808D V4.7 All versions, SINUMERIK 808D V4.8 All versions, SINUMERIK 828D V4.7 All versions V4.7 SP6 HF1, SINUMERIK 840D sl V4.7 All versions V4.7 SP6 HF5, SINUMERIK 840D sl V4.8 All versions V4.8 SP3. Specially crafted network packets sent to port...
CVE-2018-11464
A vulnerability has been identified in SINUMERIK 828D V4.7 All versions V4.7 SP6 HF1, SINUMERIK 840D sl V4.7 All versions V4.7 SP6 HF5, SINUMERIK 840D sl V4.8 All versions V4.8 SP3. The integrated VNC server on port 5900/tcp of the affected products could allow a remote attacker to cause a...
CVE-2018-11465
A vulnerability has been identified in SINUMERIK 808D V4.7 All versions, SINUMERIK 808D V4.8 All versions, SINUMERIK 828D V4.7 All versions V4.7 SP6 HF1, SINUMERIK 840D sl V4.7 All versions V4.7 SP6 HF5, SINUMERIK 840D sl V4.8 All versions V4.8 SP3. A local attacker could use ioctl calls to do ou...
CVE-2018-11463
A vulnerability has been identified in SINUMERIK 808D V4.7 All versions, SINUMERIK 808D V4.8 All versions, SINUMERIK 828D V4.7 All versions V4.7 SP6 HF1, SINUMERIK 840D sl V4.7 All versions V4.7 SP6 HF5, SINUMERIK 840D sl V4.8 All versions V4.8 SP3. A buffer overflow in the service command...
CVE-2018-11465
Siemens SINUMERIK controllers (808D, 828D, 840D sl) running affected V4.x are vulnerable to CVE-2018-11465 via ioctl abuse that can cause out-of-bounds reads, arbitrary writes, or kernel-mode code execution. Affected: 808D v4.7/v4.8 (all before certain SPs), 828D v4.7 (all before v4.7 SP6 HF1), 8...
CVE-2018-11459
Siemens SINUMERIK controllers are affected: SINUMERIK 808D v4.7/all versions and v4.8, SINUMERIK 828D v4.7, and SINUMERIK 840D sl v4.7/v4.8 (specific sub-versions). Root cause: attacker-modifiable, user-writeable configuration files can be reloaded after reboot or manual start, causing attacker-c...
CVE-2018-11463
CVE-2018-11463 affects SINUMERIK 808D (v4.7/v4.8), SINUMERIK 828D (v4.7 before SP6 HF1), and SINUMERIK 840D sl (v4.7 before SP6 HF5, v4.8 before SP3). The issue is a stack-based buffer overflow in the service command application, enabling a local attacker with existing user privileges to execute ...
CVE-2018-11464
Siemens SINUMERIK controllers are affected by CVE-2018-11464 due to an issue in the integrated VNC server on port 5900/TCP, which could allow a remote attacker to cause a denial-of-service of the VNC service. The vulnerability applies to SINUMERIK 828D v4.7 (pre-SP6 HF1), SINUMERIK 840D sl v4.7 (...
CVE-2018-11457
Siemens SINUMERIK controllers (828D v4.7, 840D sl v4.7/v4.8) expose an unpatched remote code execution flaw in the integrated web server on port 4842/TCP. An attacker with network access and without privileges can send specially crafted requests to this port to execute code with system privileges...
CVE-2018-11458
The CVE-2018-11458 issue affects Siemens SINUMERIK controllers (e.g., 828D v4.7, 840D sl v4.7/v4.8) where the integrated VNC server on port 5900/TCP can be exploited remotely to execute code with privileged permissions. Exploitation requires network access and is possible without user interaction...
CVE-2018-11464
A vulnerability has been identified in SINUMERIK 828D V4.7 All versions V4.7 SP6 HF1, SINUMERIK 840D sl V4.7 All versions V4.7 SP6 HF5, SINUMERIK 840D sl V4.8 All versions V4.8 SP3. The integrated VNC server on port 5900/tcp of the affected products could allow a remote attacker to cause a...
CVE-2018-11457
A vulnerability has been identified in SINUMERIK 828D V4.7 All versions V4.7 SP6 HF1, SINUMERIK 840D sl V4.7 All versions V4.7 SP6 HF5, SINUMERIK 840D sl V4.8 All versions V4.8 SP3. The integrated web server on port 4842/tcp of the affected products could allow a remote attacker to execute code...