2220 matches found
Siemens devices using the PROFINET Discovery and Configuration Protocol (Update F)
CVSS v3 6.5 ATTENTION: Exploitable from an adjacent network/low skill level to exploit. Vendor: Siemens Equipment: Devices using the PROFINET Discovery and Configuration Protocol DCP Vulnerability: Denial of Service UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory...
Siemens PROFINET DCP (Update V)
1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION : Exploitable from an adjacent network/low attack complexity Vendor : Siemens Equipment : Devices using the PROFINET Discovery and Configuration Protocol DCP Vulnerabilities : Uncontrolled Resource Consumption 2. UPDATE INFORMATION This updated advisory...
CVE-2016-7090
The integrated web server on Siemens SCALANCE M-800 and S615 modules with firmware before 4.02 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...
CVE-2016-7090
The integrated web server on Siemens SCALANCE M-800 and S615 modules with firmware before 4.02 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...
Session fixation
The integrated web server on Siemens SCALANCE M-800 and S615 modules with firmware before 4.02 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...
CVE-2016-7090
The integrated web server on Siemens SCALANCE M-800 and S615 modules with firmware before 4.02 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...
CVE-2016-7090
CVE-2016-7090 affects Siemens SCALANCE M-800 and S615 modules with firmware before 4.02. The integrated web server fails to set the Secure attribute on the session cookie in HTTPS, enabling cookie capture if the cookie is transmitted in an insecure (HTTP) context. Affected products: SCALANCE M-80...
SIEMENS SCALANCE m-800/S61 Module Has Information Disclosure Vulnerability
The SCALANCE M Series are industrial routers for securing remote access. An information disclosure vulnerability exists in the SIEMENS SCALANCE m-800/S61 module. An attacker exploiting the vulnerability could gain access to sensitive information, posing a risk of information leakage...
Siemens SCALANCE M-800/S615 Web Vulnerability
OVERVIEW Siemens has identified a web security vulnerability in Siemen’s SCALANCE M-800 and S615 modules. This vulnerability was reported directly to Siemens by Alexander Van Maele and Tijl Deneut from HOWEST. Siemens has produced a new firmware version to mitigate this vulnerability. AFFECTED...
Siemens Industrial Products DROWN Vulnerability (Update C)
OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-16-103-03B Siemens Industrial Products DROWN Vulnerability that was published June 15, 2017, on the NCCIC/ICS-CERT web site. Siemens has found that a DROWNa Decrypting RSA with Obsolete and Weakened eNcryption attac...
Siemens Industrial Products glibc Library Vulnerability (Update C)
OVERVIEW This updated advisory is a follow-up to the advisory update titled ICSA-16-103-01B Siemens Industrial Products glibc Library Vulnerability that was published July 14, 2016, on the NCCIC/ICS-CERT web site. Siemens reports that a buffer overflow vulnerability in the glibc library could...
Siemens SCALANCE S613 Denial of Service Vulnerability
SCALANCES firewalls are network security protection products. A denial of service vulnerability exists in the Siemens SCALANCE S613, where an unauthenticated, remote attacker sending packets to TCP port 443 can cause a denial of service to the web server...
CVE-2016-3963
Siemens SCALANCE S613 allows remote attackers to cause a denial of service web-server outage via traffic to TCP port 443...
Design/Logic Flaw
Siemens SCALANCE S613 allows remote attackers to cause a denial of service web-server outage via traffic to TCP port 443...
CVE-2016-3963
Siemens SCALANCE S613 allows remote attackers to cause a denial of service web-server outage via traffic to TCP port 443...
CVE-2016-3963
Siemens SCALANCE S613 is affected by CVE-2016-3963. A remote attacker can cause a denial of service (web-server outage) by sending crafted traffic to TCP port 443, impacting availability. The root cause/patch details are not provided in the supplied documents; refer to linked advisories/exploits ...
Siemens Industrial Products glibc Library Vulnerability (Update C)
OVERVIEW This updated advisory is a follow-up to the advisory update titled ICSA-16-103-01B Siemens Industrial Products glibc Library Vulnerability that was published July 14, 2016, on the NCCIC/ICS-CERT web site. Siemens reports that a buffer overflow vulnerability in the glibc library could...
Siemens SCALANCE S613 Denial-of-Service Vulnerability
OVERVIEW Siemens has identified a resource exhaustion vulnerability that causes a denial-of-service condition in the Siemens SCALANCE S613 device. Siemens recommends that customers contact Siemens customer support in order to obtain advice on a solution for the customer’s specific environment. Th...
Siemens Industrial Products DROWN Vulnerability (Update C)
OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-16-103-03B Siemens Industrial Products DROWN Vulnerability that was published June 15, 2017, on the NCCIC/ICS-CERT web site. Siemens has found that a DROWNThe DROWN Attack, https://drownattack.com/, web site last...
