CVE-2020-15791

A vulnerability has been identified in SIMATIC S7-300 CPU family incl. related ET200 CPUs and SIPLUS variants All versions, SIMATIC S7-400 CPU family incl. SIPLUS variants All versions, SIMATIC WinAC RTX F 2010 All versions, SINUMERIK 840D sl All versions. The authentication protocol between a...

CVE-2020-15791

A vulnerability has been identified in SIMATIC S7-300 CPU family incl. related ET200 CPUs and SIPLUS variants All versions, SIMATIC S7-400 CPU family incl. SIPLUS variants All versions, SIMATIC WinAC RTX F 2010 All versions, SINUMERIK 840D sl All versions. The authentication protocol between a...

CVE-2019-18336

A vulnerability has been identified in SIMATIC S7-300 CPU family incl. related ET200 CPUs and SIPLUS variants All versions V3.X.17, SIMATIC TDC CP51M1 All versions V1.1.8, SIMATIC TDC CPU555 All versions V1.1.1, SINUMERIK 840D sl All versions V4.8.6, SINUMERIK 840D sl All versions V4.94. Speciall...

Design/Logic Flaw

A vulnerability has been identified in SIMATIC S7-300 CPU family incl. related ET200 CPUs and SIPLUS variants All versions V3.X.17, SIMATIC TDC CP51M1 All versions V1.1.8, SIMATIC TDC CPU555 All versions V1.1.1, SINUMERIK 840D sl All versions V4.8.6, SINUMERIK 840D sl All versions V4.94. Speciall...

Softing uaGate SI, uaGate MB and uaGate 840D Command Injection Vulnerabilities

Softing uaGate SI and others are products of Softing Germany.Softing uaGate SI is a compact industrial gateway.Softing uaGate 840D is an IoT gateway.Softing uaGate MB is a gateway for Modbus TCP controllers. A command injection vulnerability exists in the CGI scripts in the Softing uaGate SI,...

Race condition

A vulnerability has been identified in SIMATIC S7-400 CPU 414-3 PN/DP V7, SIMATIC S7-400 CPU 414F-3 PN/DP V7, SIMATIC S7-400 CPU 416-3 PN/DP V7, SIMATIC S7-400 CPU 416F-3 PN/DP V7, Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller, Development/Evaluation Kits for PROFIN...

Siemens SINUMERIK 840D SL Virtual Commissioning Rack

Binary data 764683.prm...

Design/Logic Flaw

A vulnerability has been identified in SINUMERIK 828D V4.7 All versions V4.7 SP6 HF1, SINUMERIK 840D sl V4.7 All versions V4.7 SP6 HF5, SINUMERIK 840D sl V4.8 All versions V4.8 SP3. The integrated VNC server on port 5900/tcp of the affected products could allow a remote attacker to cause a...

CVE-2018-11464

A vulnerability has been identified in SINUMERIK 828D V4.7 All versions V4.7 SP6 HF1, SINUMERIK 840D sl V4.7 All versions V4.7 SP6 HF5, SINUMERIK 840D sl V4.8 All versions V4.8 SP3. The integrated VNC server on port 5900/tcp of the affected products could allow a remote attacker to cause a...

CVE-2018-11465

A vulnerability has been identified in SINUMERIK 808D V4.7 All versions, SINUMERIK 808D V4.8 All versions, SINUMERIK 828D V4.7 All versions V4.7 SP6 HF1, SINUMERIK 840D sl V4.7 All versions V4.7 SP6 HF5, SINUMERIK 840D sl V4.8 All versions V4.8 SP3. A local attacker could use ioctl calls to do ou...

Code injection

A vulnerability has been identified in SINUMERIK 828D V4.7 All versions V4.7 SP6 HF1, SINUMERIK 840D sl V4.7 All versions V4.7 SP6 HF5, SINUMERIK 840D sl V4.8 All versions V4.8 SP3. The integrated web server on port 4842/tcp of the affected products could allow a remote attacker to execute code...

Design/Logic Flaw

A vulnerability has been identified in SINUMERIK 808D V4.7 All versions, SINUMERIK 808D V4.8 All versions, SINUMERIK 828D V4.7 All versions V4.7 SP6 HF1, SINUMERIK 840D sl V4.7 All versions V4.7 SP6 HF5, SINUMERIK 840D sl V4.8 All versions V4.8 SP3. Specially crafted network packets sent to port...

CVE-2018-11463

A vulnerability has been identified in SINUMERIK 808D V4.7 All versions, SINUMERIK 808D V4.8 All versions, SINUMERIK 828D V4.7 All versions V4.7 SP6 HF1, SINUMERIK 840D sl V4.7 All versions V4.7 SP6 HF5, SINUMERIK 840D sl V4.8 All versions V4.8 SP3. A buffer overflow in the service command...

CVE-2018-11457

A vulnerability has been identified in SINUMERIK 828D V4.7 All versions V4.7 SP6 HF1, SINUMERIK 840D sl V4.7 All versions V4.7 SP6 HF5, SINUMERIK 840D sl V4.8 All versions V4.8 SP3. The integrated web server on port 4842/tcp of the affected products could allow a remote attacker to execute code...

CVE-2018-11459

Siemens SINUMERIK controllers are affected: SINUMERIK 808D v4.7/all versions and v4.8, SINUMERIK 828D v4.7, and SINUMERIK 840D sl v4.7/v4.8 (specific sub-versions). Root cause: attacker-modifiable, user-writeable configuration files can be reloaded after reboot or manual start, causing attacker-c...

CVE-2018-11463

CVE-2018-11463 affects SINUMERIK 808D (v4.7/v4.8), SINUMERIK 828D (v4.7 before SP6 HF1), and SINUMERIK 840D sl (v4.7 before SP6 HF5, v4.8 before SP3). The issue is a stack-based buffer overflow in the service command application, enabling a local attacker with existing user privileges to execute ...

CVE-2018-11464

Siemens SINUMERIK controllers are affected by CVE-2018-11464 due to an issue in the integrated VNC server on port 5900/TCP, which could allow a remote attacker to cause a denial-of-service of the VNC service. The vulnerability applies to SINUMERIK 828D v4.7 (pre-SP6 HF1), SINUMERIK 840D sl v4.7 (...

CVE-2018-11457

Siemens SINUMERIK controllers (828D v4.7, 840D sl v4.7/v4.8) expose an unpatched remote code execution flaw in the integrated web server on port 4842/TCP. An attacker with network access and without privileges can send specially crafted requests to this port to execute code with system privileges...

CVE-2018-11458

The CVE-2018-11458 issue affects Siemens SINUMERIK controllers (e.g., 828D v4.7, 840D sl v4.7/v4.8) where the integrated VNC server on port 5900/TCP can be exploited remotely to execute code with privileged permissions. Exploitation requires network access and is possible without user interaction...

CVE-2018-11465

Siemens SINUMERIK controllers (808D, 828D, 840D sl) running affected V4.x are vulnerable to CVE-2018-11465 via ioctl abuse that can cause out-of-bounds reads, arbitrary writes, or kernel-mode code execution. Affected: 808D v4.7/v4.8 (all before certain SPs), 828D v4.7 (all before v4.7 SP6 HF1), 8...