Siemens Multiple Devices Profinet DCP Denial of Service

Binary data 720111.prm...

Siemens Multiple Devices Profinet DCP Denial of Service

Binary data 720110.prm...

Siemens Multiple Devices Remote Code Execution

Binary data 720142.prm...

Siemens SCALANCE X200 IRT Switches < 5.1.0 SNMP Command Execution

Binary data 720038.prm...

Siemens SCALANCE S602, S612, S623, S627-2M < 4.0.1.1 Cross-Site Scripting (XSS)

Binary data 720169.prm...

The vulnerability of Scalance X industrial switches lies in the insufficient validation of input data, which allows attackers to bypass network firewalls.

The vulnerability of Scalance X industrial switches is related to insufficient verification of input data. Exploiting this vulnerability can allow a remote attacker to bypass network firewalls by transmitting malicious packets into the mirrored network...

Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update F)

1. EXECUTIVE SUMMARY CVSS v3 6.8 ATTENTION : Exploitable remotely/low skill level to exploit/public exploits are available. Vendor : Siemens Equipment : SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products Vulnerabilities : Security Features 2. UPDATE INFORMATION This updated advisory is a...

Siemens SCALANCE and SIMATIC libcurl (Update B)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SCALANCE and SIMATIC Vulnerability: Out-of-bounds Read 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update titled ICSA-21-068-10 Siemens SCALANCE and...

Multiple SCALANCE X switches products mirror port isolation vulnerability

SCALANCE X switches are used to connect industrial components such as programmable logic controllers PLCs or human machine interfaces HMIs. A mirror port isolation vulnerability exists in several SCALANCE X switches products. The vulnerability is due to the monitoring barriers on the affected...

PT-2019-1886

Name of the Vulnerable Software and Affected Versions Scalance X affected versions not specified Description The issue is related to insufficient monitoring barrier in the affected products, allowing data to be forwarded over the mirror port into the mirrored network. This behavior can be exploit...

Siemens SCALANCE X (Update D)

1. EXECUTIVE SUMMARY CVSS v3 5.4 ATTENTION: Exploitable remotely Vendor: Siemens Equipment: SCALANCE X Vulnerability: Expected Behavior Violation 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update titled ICSA-19-085-01 Siemens SCALANCE X Update C that was published...

The vulnerability of Siemens SCALANCE S network gateways’ microprogramming software is related to insufficient protection of the WEB-page structure, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of Siemens SCALANCE S network gateways’ microprogramming software is related to insufficient protection of the web page structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

CVE-2018-16555

A vulnerability has been identified in SCALANCE S602 All versions V4.0.1.1, SCALANCE S612 All versions V4.0.1.1, SCALANCE S623 All versions V4.0.1.1, SCALANCE S627-2M All versions V4.0.1.1. The integrated web server could allow Cross-Site Scripting XSS attacks if unsuspecting users are tricked in...

Cross site scripting

A vulnerability has been identified in SCALANCE S602 All versions V4.0.1.1, SCALANCE S612 All versions V4.0.1.1, SCALANCE S623 All versions V4.0.1.1, SCALANCE S627-2M All versions V4.0.1.1. The integrated web server could allow Cross-Site Scripting XSS attacks if unsuspecting users are tricked in...

CVE-2018-16555

A vulnerability has been identified in SCALANCE S602 All versions V4.0.1.1, SCALANCE S612 All versions V4.0.1.1, SCALANCE S623 All versions V4.0.1.1, SCALANCE S627-2M All versions V4.0.1.1. The integrated web server could allow Cross-Site Scripting XSS attacks if unsuspecting users are tricked in...

CVE-2018-16555

A vulnerability has been identified in SCALANCE S602 All versions V4.0.1.1, SCALANCE S612 All versions V4.0.1.1, SCALANCE S623 All versions V4.0.1.1, SCALANCE S627-2M All versions V4.0.1.1. The integrated web server could allow Cross-Site Scripting XSS attacks if unsuspecting users are tricked in...

CVE-2018-16555

CVE-2018-16555 affects Siemens SCALANCE S602, S612, S623 and S627-2M (all versions before 4.0.1.1). The vulnerability is an improper neutralization of input during web page generation, enabling cross-site scripting (XSS) if a user, who must be logged into the web interface, is tricked into clicki...

CVE-2018-16555: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A vulnerability has been identified in SCALANCE S602 All versions V4.0.1.1, SCALANCE S612 All versions V4.0.1.1, SCALANCE S623 All versions V4.0.1.1, SCALANCE S627-2M All versions V4.0.1.1. The integrated web server could allow Cross-Site Scripting XSS attacks if unsuspecting users are tricked in...

Multiple Siemens Products Cross-Site Scripting Vulnerabilities

Siemens SCALANCE S602 and others are Ethernet security modules from Siemens, Germany. A cross-site scripting vulnerability exists in several Siemens products, which can be exploited by remote attackers to inject arbitrary scripts via malicious links...

Siemens Patches Firewall Flaw That Put Operations at Risk

Siemens AG on Tuesday issued a slew of fixes addressing eight vulnerabilities spanning its industrial product lines. The most serious of the patched flaws include a cross-site scripting vulnerability in Siemens’ SCALANCE firewall product. The flaw could allow an attacker to gain unauthorized acce...