366 matches found
PT-2013-01: XML External Entity Injection in GNOME
Positive Research Center experts have detected a local resources access vulnerability files and internal network resources via XML External Entity enabled in GNOME. An attacker is able to give a user a specially crafted file. If he or she views a folder with the file or opens it, librsvg sends...
PT-2013-44: Forced browsing in Siemens WinCC and SIMATIC PCS 7
The specialists of the Positive Research center have detected a vulnerability, which can be used to gain access to usernames in Siemens WinCC and SIMATIC PCS 7. The WinCC Web Navigator 7.2 allows a user with authenticated access to probe for valid NetBIOS user names by manipulating URL parameters...
PT-2013-42: SQL Injection in Siemens WinCC and SIMATIC PCS 7
The specialists of the Positive Research center have detected "SQL Injection" vulnerability in Siemens WinCC and SIMATIC PCS 7. The WinCC Web Navigator 7.2 and Runtime Client OPC protocol have input filtering in the login screen an attacker can overcome, allowing injection of SQL statements into...
PT-2014-12: Information Disclosure in Siemens SIMATIC WinCC
The specialists of the Positive Research center have detected an Information disclosure vulnerability in SIMATIC WinCC. The SIMATIC WinCC WebNavigator server at port 80/tcp and port 443/tcp could allow unauthenticated access to sensitive data if an attacker sends specially crafted HTTP requests t...
PT-2013-37: Multiple Cross Site Scripting (XSS) in Wonderware Information Server
Positive Research Center experts have discovered multiple "Cross Site Scripting" vulnerabilities in Wonderware Information Server. This vulnerability enables an attacker to inject client-side script into Web pages viewed by other users or bypass client-side security mechanisms imposed by modern W...
PT-2013-39: Improper Input Validation in Wonderware Information Server
Positive Research Center experts have discovered "Improper Input Validation" vulnerability in Wonderware Information Server. WIS allows access to local resources files and internal resources via unsafe parsing of XML external entities. By using specially crafted XML files, an attacker can cause W...
PT-2013-73: XML External Entities Resolution vulnerability in Microsoft Office Word
The specialists of the Positive Research center have detected an XML External Entities Resolution vulnerability in Microsoft Office Word and Word Viewer. The vulnerability is possible due to unsafe parsing of XML external entities. If an attacker makes a victim open a specially crafted XML...
PT-2013-36: XML External Entity Injection in Wonderware Win-XML Exporter
Positive Research Center experts have discovered "XML External Entity Injection" vulnerability in Wonderware Win-XML Exporter. If an attacker manages to make a victim open a project that contains specially crafted XML, Wonderware Win-XML Exporter will automatically send the contents of local or...
PT-2015-09: Information Disclosure in Siemens SIMATIC STEP 7 (TIA Portal)
The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Siemens SIMATIC STEP 7 TIA Portal. Device user passwords in TIA portal project files are stored using a weak hashing algorithm. Attackers with read access to the project file could possibly...
PT-2013-32: Directory Traversal in Siemens Simatic WinCC TIA Portal
The specialists of the Positive Research center have detected "Directory Traversal" vulnerability in Siemens Simatic WinCC TIA Portal. By manipulating the URL an authenticated attacker may have access to source code of the panel’s server-side web application files, which may include user defined...
PT-2013-30: Denial of Service in Siemens Simatic WinCC TIA Portal
The specialists of the Positive Research center have detected "Denial of Service" vulnerability in Siemens Simatic WinCC TIA Portal. By manipulating HTTP requests an authenticated attacker may crash the HMI’s web application. The web application will become unavailable until the device is...
PT-2013-34: Cross-Site Scripting in Siemens Simatic WinCC TIA Portal
The specialists of the Positive Research center have detected "Cross-Site Scripting" vulnerability in Siemens Simatic WinCC TIA Portal. If a user clicks on a malicious link which seems to lead to a HMI web application, it is possible to display any data to the user server-side script injection. H...
PT-2013-35: Cross-Site Scripting in Siemens Simatic WinCC TIA Portal
The specialists of the Positive Research center have detected "Cross-Site Scripting" vulnerability in Siemens Simatic WinCC TIA Portal. The HMI’s web application is susceptible to reflected Cross-Site-Scripting attacks. If a legitimate user clicks on a malicious link, JavaScript code may get...
PT-2013-31: Cross-Site Scripting in Siemens Simatic WinCC TIA Portal
The specialists of the Positive Research center have detected "Cross-Site Scripting" vulnerability in Siemens Simatic WinCC TIA Portal. The HMI’s web application is susceptible to stored Cross-Site-Scripting attacks. An authenticated user may store data on the web application, which will execute...
PT-2013-29: Information Disclosure in Siemens Simatic WinCC and PCS 7
The specialists of the Positive Research center have detected "Information Disclosure" vulnerability in Siemens Simatic WinCC and PCS 7. By opening a manipulated project file, sensitive data can be transmitted over the network or a DoS condition can be provoked. How to fix Update your software up...
PT-2013-28: Buffer Overflow in Siemens Simatic WinCC and PCS 7
The specialists of the Positive Research center have detected "Buffer Overflow" vulnerability in Siemens Simatic WinCC and PCS 7. An ActiveX control "RegReader", which is installed in the user’s web browser, is susceptible to a buffer overflow. An attacker might trick a victim into visiting a...
[PT-2012-23] SQL Injection in Dr.Web Anti-virus
----------------------------------------------------------------------------- PT-2012-23 Positive Technologies Security Advisory SQL Injection in Dr.Web Anti-virus ----------------------------------------------------------------------------- --- Vulnerable software Dr.Web Anti-virus Version: 7.00...
PT-2013-25: Information Disclosure in Siemens Simatic WinCC and PCS 7
The specialists of the Positive Research center have detected "Information Disclosure" vulnerability in Siemens Simatic WinCC and PCS 7. WebNavigator passwords stored in the SQL database are only obfuscated. How to fix Update your software up to the latest version Advisory status 11.07.2012 -...
PT-2013-26: Information Disclosure in Siemens Simatic WinCC and PCS 7
The specialists of the Positive Research center have detected "Information Disclosure" vulnerability in Siemens Simatic WinCC and PCS 7. Users with legitimate, non-privileged access to WinCC MS SQL database can retrieve obfuscated user passwords for WebNavigator. For doing this, access to the...
PT-2013-51: Open Redirect Vulnerability in Siemens Simatic WinCC TIA Portal
The specialists of the Positive Research center have detected "Open Redirect" vulnerability in Siemens Simatic WinCC TIA Portal. Open redirect vulnerability in Siemens WinCC TIA Portal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks by leveraging...