PT-2012-4451

Name of the Vulnerable Software and Affected Versions Siemens WinCC versions 7.0 SP3 and earlier Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via a crafted SOAP message. This affects products that use WebNavigator in Siemens WinCC, such as SIMATIC...

CVE-2012-3034: Exposure of Sensitive Information to an Unauthorized Actor

WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to discover a username and password via crafted parameters to unspecified methods in ActiveX controls...

PT-2012-4439

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC STEP7 versions prior to 5.5 SP1 Siemens SIMATIC PCS7 versions 7.1 SP3 and earlier Description The issue allows local users to gain privileges via a Trojan horse DLL in a STEP7 project folder. This is due to an untrusted search...

CVE-2012-3015: Undefined Security Weakness

Untrusted search path vulnerability in Siemens SIMATIC STEP7 before 5.5 SP1, as used in SIMATIC PCS7 7.1 SP3 and earlier and other products, allows local users to gain privileges via a Trojan horse DLL in a STEP7 project folder...