EUVD-2017-5538

Malware in sbrugna...

Siemens SIMATIC PCS 7 <= V8.0 RCE (ICSA-19-134-02-0)

Binary data 720264.prm...

Siemens SIMATIC PCS 7 <= V9.0 and TIA Portal <= 15 SQL Injection RCE (ICSA-19-134-08)

Binary data 720263.prm...

Siemens SIMATIC PCS 7 <= V9.0 and TIA Portal <= 15 SQL Injection (ICSA-19-134-08)

Binary data 720261.prm...

Input validation

An Improper Input Validation issue was discovered in Siemens SIMATIC PCS 7 V8.1 prior to V8.1 SP1 with WinCC V7.3 Upd 13, and V8.2 all versions. The improper input validation vulnerability has been identified, which may allow an authenticated remote attacker who is a member of the administrators...

CVE-2017-14023

An Improper Input Validation issue was discovered in Siemens SIMATIC PCS 7 V8.1 prior to V8.1 SP1 with WinCC V7.3 Upd 13, and V8.2 all versions. The improper input validation vulnerability has been identified, which may allow an authenticated remote attacker who is a member of the administrators...

CVE-2017-14023: Improper Input Validation

An Improper Input Validation issue was discovered in Siemens SIMATIC PCS 7 V8.1 prior to V8.1 SP1 with WinCC V7.3 Upd 13, and V8.2 all versions. The improper input validation vulnerability has been identified, which may allow an authenticated remote attacker who is a member of the administrators...

CVE-2016-9160

A vulnerability in SIEMENS SIMATIC WinCC All versions SIMATIC WinCC V7.2 and SIEMENS SIMATIC PCS 7 All versions SIMATIC PCS 7 V8.0 SP1 could allow a remote attacker to crash an ActiveX component or leak parts of the application memory if a user is tricked into clicking on a malicious link under...

CVE-2016-9160: Direct Use of Unsafe JNI

A vulnerability in SIEMENS SIMATIC WinCC All versions SIMATIC WinCC V7.2 and SIEMENS SIMATIC PCS 7 All versions SIMATIC PCS 7 V8.0 SP1 could allow a remote attacker to crash an ActiveX component or leak parts of the application memory if a user is tricked into clicking on a malicious link under...

CVE-2016-5743: Improper Input Validation

Siemens SIMATIC WinCC before 7.3 Update 10 and 7.4 before Update 1, SIMATIC BATCH before 8.1 SP1 Update 9 as distributed in SIMATIC PCS 7 through 8.1 SP1, SIMATIC OpenPCS 7 before 8.1 Update 3 as distributed in SIMATIC PCS 7 through 8.1 SP1, SIMATIC OpenPCS 7 before 8.2 Update 1 as distributed in...

CVE-2014-8552: Exposure of Sensitive Information to an Unauthorized Actor

The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before Update 2; SIMATIC PCS 7 7.1 through SP4, 8.0 through SP2, and 8.1; and TIA Portal 13 before Update 6 allows remote attackers to read arbitrary files via crafted packets...