Siemens SICAM MMU, SICAM T, and SICAM SGU

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SICAM MMU, SICAM T and SICAM SGU Vulnerabilities: Out-of-bounds Read, Missing Authentication for Critical Function, Missing Encryption of Sensitive Data, Use of Password Hash wit...

Siemens Sicam Improper Input Validation

A vulnerability in Siemens SICAM PAS all versions before V8.09 could allow a remote attacker to upload, download, or delete files in certain parts of the file system by sending specially crafted packets to port 19235/TCP. File data ot500098.nasl...

Siemens Sicam Improper Input Validation

Siemens SICAM MIC devices with firmware before 2404 allow remote attackers to bypass authentication and obtain administrative access via unspecified HTTP requests. File data ot500141.nasl...

Siemens Ec Unspecified Vulnerability

A vulnerability has been identified in IEC 61850 system configurator All versions V5.80, DIGSI 5 affected as IEC 61850 system configurator is incorporated All versions V7.80, DIGSI 4 All versions V4.93, SICAM PAS/PQS All versions V8.11, SICAM PQ Analyzer All versions V3.11, SICAM SCC All versions...

Siemens Sicam Exposure of Sensitive Information to an Unauthorized Actor

Siemens SICAM PAS before 8.07 does not properly restrict password data in the database, which makes it easier for local users to calculate passwords by leveraging unspecified database privileges. File data ot500252.nasl...

Siemens Sicam Exposure of Sensitive Information to an Unauthorized Actor

Siemens SICAM PAS through 8.07 allows local users to obtain sensitive configuration information by leveraging database stoppage. File data ot500091.nasl...

Siemens Sicam Improper Input Validation

A vulnerability in Siemens SICAM PAS all versions before V8.09 could allow a remote attacker to cause a Denial of Service condition and potentially lead to unauthenticated remote code execution by sending specially crafted packets to port 19234/TCP. File data ot500171.nasl...

Siemens Sicam Unspecified Vulnerability

An issue was discovered in Siemens SICAM PAS before 8.00. Because of Storing Passwords in a Recoverable Format, an authenticated local attacker with certain privileges could possibly reconstruct the passwords of users for accessing the database. File data ot500097.nasl...

Siemens Sicam Use of Hard-coded Credentials

An issue was discovered in Siemens SICAM PAS before 8.00. A factory account with hard-coded passwords is present in the SICAM PAS installations. Attackers might gain privileged access to the database over Port 2638/TCP. File data ot500290.nasl...

Siemens Sicam Improper Input Validation

A vulnerability has been identified in SICAM A8000 CP-8000 All versions V14, SICAM A8000 CP-802X All versions V14, SICAM A8000 CP-8050 All versions V2.00. Specially crafted network packets sent to port 80/TCP or 443/TCP could allow an unauthenticated remote attacker to cause a Denial-of-Service...

Siemens SICAM RTUs SM-2556 COM Modules XSS

Binary data 720106.prm...

Siemens SICAM RTUs SM-2556 COM Modules Authentication Bypass

Binary data 720105.prm...

Siemens SICAM RTUs SM-2556 COM Modules Code Injection

Binary data 720107.prm...

CVE-2018-13798

A vulnerability has been identified in SICAM A8000 CP-8000 All versions V14, SICAM A8000 CP-802X All versions V14, SICAM A8000 CP-8050 All versions V2.00. Specially crafted network packets sent to port 80/TCP or 443/TCP could allow an unauthenticated remote attacker to cause a Denial-of-Service...

CVE-2018-13798

A vulnerability has been identified in SICAM A8000 CP-8000 All versions V14, SICAM A8000 CP-802X All versions V14, SICAM A8000 CP-8050 All versions V2.00. Specially crafted network packets sent to port 80/TCP or 443/TCP could allow an unauthenticated remote attacker to cause a Denial-of-Service...

CVE-2018-13798

Siemens SICAM A8000 RTU series (CP-8000 < v14, CP-802X < v14, CP-8050

CVE-2018-13798

A vulnerability has been identified in SICAM A8000 CP-8000 All versions V14, SICAM A8000 CP-802X All versions V14, SICAM A8000 CP-8050 All versions V2.00. Specially crafted network packets sent to port 80/TCP or 443/TCP could allow an unauthenticated remote attacker to cause a Denial-of-Service...

CVE-2018-13798: Improper Input Validation

A vulnerability has been identified in SICAM A8000 CP-8000 All versions V14, SICAM A8000 CP-802X All versions V14, SICAM A8000 CP-8050 All versions V2.00. Specially crafted network packets sent to port 80/TCP or 443/TCP could allow an unauthenticated remote attacker to cause a Denial-of-Service...

PT-2019-8973

Name of the Vulnerable Software and Affected Versions SICAM A8000 CP-8000 versions prior to V14 SICAM A8000 CP-802X versions prior to V14 SICAM A8000 CP-8050 versions prior to V2.00 Description A vulnerability allows an unauthenticated remote attacker to cause a Denial-of-Service condition of the...

WIBU SYSTEMS AG WibuKey Digital Rights Management (Update B)

1. EXECUTIVE SUMMARY CVSS v3 10.0 --------- Begin Update B Part 1 of 4 --------- ATTENTION: Exploitable remotely/low skill level to exploit/public exploits available Vendor: WIBU-SYSTEMS AG Equipment: WibuKey Digital Rights Management DRM --------- End Update B Part 1 of 4 ---------...