624 matches found
Code injection
Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 aka TIA portal; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allow user-assisted remote attackers to execute arbitrary code via a crafted project file,...
CVE-2011-4514
The TELNET daemon in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 aka TIA portal; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime does not perform authentication, which makes it easier for remote attacker...
PT-2012-1894
Name of the Vulnerable Software and Affected Versions Siemens WinCC flexible versions 2004 through 2008 before SP3 Siemens WinCC V11 aka TIA portal versions prior to SP2 Update 1 Siemens TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels affected versions not specified Siemens WinCC...
PT-2012-1895
Name of the Vulnerable Software and Affected Versions Siemens WinCC flexible versions 2004 through 2008 before SP3 Siemens WinCC V11 aka TIA portal versions prior to SP2 Update 1 Siemens TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels affected versions not specified Siemens WinCC...
PT-2012-1978
Name of the Vulnerable Software and Affected Versions Siemens WinCC flexible versions 2004 through 2008 WinCC V11 aka TIA portal TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels WinCC V11 Runtime Advanced WinCC flexible Runtime Description The issue is related to a stack-based...
CVE-2011-4510: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 aka TIA portal before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime...
CVE-2011-4509: Undefined Security Weakness
The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 aka TIA portal; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime has an improperly selected default password for the administrator account...
CVE-2011-4513: Undefined Security Weakness
Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 aka TIA portal; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allow user-assisted remote attackers to execute arbitrary code via a crafted project file,...
CVE-2011-4511: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 aka TIA portal before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime...
PT-2012-1981
Name of the Vulnerable Software and Affected Versions Siemens WinCC flexible versions 2004 through 2008 before SP3 Siemens WinCC V11 aka TIA portal versions prior to SP2 Update 1 Siemens TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels affected versions not specified Siemens WinCC...
PT-2012-1893
Name of the Vulnerable Software and Affected Versions Siemens WinCC flexible versions 2004 through 2008 Siemens WinCC V11 aka TIA portal Siemens TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels Siemens WinCC V11 Runtime Advanced Siemens WinCC flexible Runtime Description The issue...
PT-2012-1896
Name of the Vulnerable Software and Affected Versions Siemens WinCC flexible versions 2004 through 2008 before SP3 Siemens WinCC V11 aka TIA portal versions prior to SP2 Update 1 Siemens TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels affected versions not specified Siemens WinCC...
PT-2012-1982
Name of the Vulnerable Software and Affected Versions Siemens WinCC flexible versions 2004 through 2008 before SP3 Siemens WinCC V11 aka TIA portal versions prior to SP2 Update 1 Siemens TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels affected versions not specified Siemens WinCC...
PT-2012-1897
Name of the Vulnerable Software and Affected Versions Siemens WinCC flexible versions 2004 through 2008 WinCC V11 aka TIA portal WinCC V11 Runtime Advanced WinCC flexible Runtime TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels affected versions not specified Description The issue...
PT-2012-1980
Name of the Vulnerable Software and Affected Versions Siemens WinCC flexible versions 2004 through 2008 WinCC V11 aka TIA portal TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels WinCC V11 Runtime Advanced WinCC flexible Runtime Description The issue allows remote attackers to caus...
CVE-2012-0914
Cross-site scripting XSS vulnerability in displayrenderers/panelsrenderereditor.class.php in the admin view in the Panels module 6.x-2.x before 6.x-3.10 and 7.x-3.x before 7.x-3.0 for Drupal allows remote authenticated users with certain privileges to inject arbitrary web script or HTML via the...
Cross site scripting
Cross-site scripting XSS vulnerability in displayrenderers/panelsrenderereditor.class.php in the admin view in the Panels module 6.x-2.x before 6.x-3.10 and 7.x-3.x before 7.x-3.0 for Drupal allows remote authenticated users with certain privileges to inject arbitrary web script or HTML via the...
CVE-2012-0914
Cross-site scripting XSS vulnerability in displayrenderers/panelsrenderereditor.class.php in the admin view in the Panels module 6.x-2.x before 6.x-3.10 and 7.x-3.x before 7.x-3.0 for Drupal allows remote authenticated users with certain privileges to inject arbitrary web script or HTML via the...
CVE-2012-0914
The CVE-2012-0914 issue affects the Drupal Panels module: Panels 6.x-2.x before 6.x-3.10 and 7.x-3.x before 7.x-3.0 allow XSS via Region titles due to insufficient input sanitization. An attacker must have a role with the permission to administer panel layouts and be a remote authenticated user w...
KLA10394 Multiple vulnerabilities in Siemens
Multiple critical vulnerabilities have been found in Siemens products. Malicious users can exploit these vulnerabilities to read & modify arbitrary files, cause denial of service, execute arbitrary code, bypass authentication, obtain access and inject arbitrary HTTP headers. Below is a complete...