CVE-2014-2247

The integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to inject headers via unspecified vectors...

CVE-2014-2259

Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service defect-mode transition via crafted HTTPS packets...

CVE-2014-2249

Cross-site request forgery CSRF vulnerability on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 and SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2014-2248

Open Redirect vulnerability CVE-2014-2248 affects Siemens SIMATIC S7-1500 CPU PLCs with web server (ports 80/443). Root cause: open redirect in the integrated web server, enabling remote attackers to redirect users to untrusted sites and facilitate phishing. Affects firmware older than 1.5.0; mit...

CVE-2014-2259

Siemens SIMATIC S7-1500 CPU PLCs were affected by CVE-2014-2259: devices running firmware before 1.5.0 could be forced into defect mode (DoS) by specially crafted HTTPS packets. The issue stems from the web/server handling in the CPU firmware, enabling remote DoS without authentication. Siemens r...

CVE-2014-2253

CVE-2014-2253 affects Siemens SIMATIC S7-1500 CPU PLCs with firmware before 1.5.0. The vulnerability allows remote attackers to cause a denial of service (defect‑mode transition) by sending crafted Profinet packets. Public details in the connected docs confirm the affected product family, the att...

CVE-2014-2257

Affected product: Siemens SIMATIC S7-1500 CPU PLCs with firmware

CVE-2014-2246

CVE-2014-2246 is an XSS vulnerability in the integrated web server of Siemens SIMATIC S7-1500 CPU PLCs with firmware older than 1.5.0 . The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The affected component is the web server running on the PLC dev...

CVE-2014-2255

Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service defect-mode transition via crafted HTTP packets...

CVE-2014-2248

Open redirect vulnerability in the integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2014-2249

CVE-2014-2249 is a CSRF vulnerability in Siemens SIMATIC S7-1500 (< v1.5) and S7-1200 (

CVE-2014-2257

Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service defect-mode transition via crafted ISO-TSAP packets...

CVE-2014-2251

The random-number generator on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 does not have sufficient entropy, which makes it easier for remote attackers to defeat cryptographic protection mechanisms and hijack sessions via unspecified vectors...

CVE-2014-2247

This CVE affects Siemens SIMATIC S7-1500 CPU PLCs with firmware = 1.5.0 and apply network segmentation and access controls to reduce exposure.

CVE-2014-2251

Siemens SIMATIC S7-1500 CPUs with firmware

CVE-2014-0779

The PLC driver in ServerMain.exe in the Kepware KepServerEX 4 component in Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R2 build 71.4165, 2010 R2.1 build 71.4325, 2010 R3 build 72.4560, 2010 R3.1 build 72.4644, 2013 R1 build 73.4729, 2013 R1.1 build 73.4832, 2013 R1.1a build...

Design/Logic Flaw

The PLC driver in ServerMain.exe in the Kepware KepServerEX 4 component in Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R2 build 71.4165, 2010 R2.1 build 71.4325, 2010 R3 build 72.4560, 2010 R3.1 build 72.4644, 2013 R1 build 73.4729, 2013 R1.1 build 73.4832, 2013 R1.1a build...

CVE-2014-0779 Schneider Electric StruxureWare SCADA Expert ClearSCADA Improper Restriction of Operations within the Bounds of a Memory Buffer

The PLC driver in ServerMain.exe in the Kepware KepServerEX 4 component in Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R2 build 71.4165, 2010 R2.1 build 71.4325, 2010 R3 build 72.4560, 2010 R3.1 build 72.4644, 2013 R1 build 73.4729, 2013 R1.1 build 73.4832, 2013 R1.1a build...

CVE-2014-0779

The CVE-2014-0779 issue affects the Kepware KepServerEX V4 PLC Driver in the ServerMain.exe component of Schneider Electric StruxureWare SCADA Expert ClearSCADA, impacting multiple release/build combos listed in the NVD entry (2010 R2, 2010 R2.1, 2010 R3, 2010 R3.1, 2013 R1, 2013 R1.1, 2013 R1.1a...

Yokogawa Multiple Products Vulnerabilities

OVERVIEW Yokogawa reports that several buffer overflow vulnerabilities affect several of its products. Juan Vazquez of Rapid7 Inc.,Rapid7 Inc., http://www.rapid7.com, web site last accessed May 13, 2014. and independent researcher Julian Vilas Diaz reported to CERT/CC that they identified several...