ICSA-19-253-03_Siemens Industrial Products (Update P)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Industrial Products Vulnerabilities: Excessive Data Query Operations in a Large Data Table, Integer Overflow or Wraparound, Uncontrolled Resource Consumption 2. UPDATE INFORMATION...

Siemens SCALANCE S602 Security module

Binary data 751132.prm...

CVE-2018-16555

A vulnerability has been identified in SCALANCE S602 All versions V4.0.1.1, SCALANCE S612 All versions V4.0.1.1, SCALANCE S623 All versions V4.0.1.1, SCALANCE S627-2M All versions V4.0.1.1. The integrated web server could allow Cross-Site Scripting XSS attacks if unsuspecting users are tricked in...

CVE-2018-16555

CVE-2018-16555 affects Siemens SCALANCE S602, S612, S623 and S627-2M (all versions before 4.0.1.1). The vulnerability is an improper neutralization of input during web page generation, enabling cross-site scripting (XSS) if a user, who must be logged into the web interface, is tricked into clicki...

CVE-2018-16555

A vulnerability has been identified in SCALANCE S602 All versions V4.0.1.1, SCALANCE S612 All versions V4.0.1.1, SCALANCE S623 All versions V4.0.1.1, SCALANCE S627-2M All versions V4.0.1.1. The integrated web server could allow Cross-Site Scripting XSS attacks if unsuspecting users are tricked in...

CVE-2018-16555: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A vulnerability has been identified in SCALANCE S602 All versions V4.0.1.1, SCALANCE S612 All versions V4.0.1.1, SCALANCE S623 All versions V4.0.1.1, SCALANCE S627-2M All versions V4.0.1.1. The integrated web server could allow Cross-Site Scripting XSS attacks if unsuspecting users are tricked in...

Multiple Siemens Products Cross-Site Scripting Vulnerabilities

Siemens SCALANCE S602 and others are Ethernet security modules from Siemens, Germany. A cross-site scripting vulnerability exists in several Siemens products, which can be exploited by remote attackers to inject arbitrary scripts via malicious links...

PT-2018-2164

Name of the Vulnerable Software and Affected Versions SCALANCE S602 versions prior to 4.0.1.1 SCALANCE S612 versions prior to 4.0.1.1 SCALANCE S623 versions prior to 4.0.1.1 SCALANCE S627-2M versions prior to 4.0.1.1 Description A vulnerability has been identified that could allow Cross-Site...

Stack overflow

Stack-based buffer overflow in the Profinet DCP protocol implementation on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, and S613 V2 with firmware before 2.3.0.3 allows remote attackers to cause a denial of service device outage or possibly execute arbitrary code via a crafted...