CVE-2012-1800

The CVE-2012-1800 entry concerns a stack-based buffer overflow in the Profinet DCP protocol stack of Siemens Scalance S Security Module firewalls (models S602 V2, S612 V2, S613 V2) prior to firmware 2.3.0.3. The flaw allows remote attackers, via a crafted DCP frame, to cause a denial of service o...

CVE-2012-1799

CVE-2012-1799 affects Siemens Scalance S Security Module firewalls S602 V2, S612 V2, and S613 V2 prior to firmware version 2.3.0.3. The web server does not limit the rate of authentication attempts, enabling remote attackers to conduct brute-force attacks to obtain administrative access. Connecte...

CVE-2012-1802

CVE-2012-1802 affects Siemens Scalance X Industrial Ethernet switches (X414-3E, X308-2M, X-300EEC, XR-300, X-300) where the embedded web server can overflow the buffer via a malformed URL. Root cause: improper URL sanitization leading to a memory overflow (CWE-119). Impacts: remote denial of serv...

CVE-2012-1802: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the embedded web server on the Siemens Scalance X Industrial Ethernet switch X414-3E before 3.7.1, X308-2M before 3.7.2, X-300EEC before 3.7.2, XR-300 before 3.7.2, and X-300 before 3.7.2 allows remote attackers to cause a denial of service device reboot or possibly execute...

CVE-2012-1799: Improper Authentication

The web server on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, and S613 V2 with firmware before 2.3.0.3 does not limit the rate of authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack on the administrative password...

CVE-2012-1800: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the Profinet DCP protocol implementation on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, and S613 V2 with firmware before 2.3.0.3 allows remote attackers to cause a denial of service device outage or possibly execute arbitrary code via a crafted...

PT-2012-3547

Name of the Vulnerable Software and Affected Versions Siemens Scalance S Security Module firewall versions prior to 2.3.0.3 Description The issue allows remote attackers to gain access via a brute-force attack on the administrative password due to the lack of rate limiting on authentication...

PT-2012-3550

Name of the Vulnerable Software and Affected Versions Siemens Scalance X Industrial Ethernet switch X414-3E versions prior to 3.7.1 Siemens Scalance X Industrial Ethernet switch X308-2M versions prior to 3.7.2 Siemens Scalance X Industrial Ethernet switch X-300EEC versions prior to 3.7.2 Siemens...

PT-2012-3548

Name of the Vulnerable Software and Affected Versions Siemens Scalance S Security Module firewall versions prior to 2.3.0.3 Description A stack-based buffer overflow issue exists in the Profinet DCP protocol implementation, allowing remote attackers to cause a denial of service or possibly execut...

Siemens Scalance X Buffer Overflow Vulnerability

Overview ICS-CERT has received a report from Siemens regarding a buffer overflow vulnerability in the web interface of the Scalance X Industrial Ethernet switch. This vulnerability was reported to Siemens by Jürgen Bilberger from Daimler TSS GmbH. This vulnerability leaves the affected devices...

Siemens Scalance S Multiple Security Vulnerabilities

Overview ICS-CERT has received a report from Siemens regarding two security vulnerabilities in the Scalance S Security Module firewall. This vulnerability was reported to Siemens by Adam Hahn and Manimaran Govindarasu for coordinated disclosure. The first issue is a brute-force credential guessin...