Siemens SIMATIC S7-1500 Denial of Service Vulnerability (CNVD-2016-00931)

The Siemens SIMATIC S7-1500 is a controller family with a modular structure. A denial of service vulnerability exists in Siemens SIMATIC S7-1500 versions prior to 1.8.3 when processing specially crafted TCP packets. An attacker can exploit the vulnerability to cause the CPU to automatically reboo...

Siemens SIMATIC S7-1500 Bypass Mechanism Vulnerability

The Siemens SIMATIC S7-1500 is a controller family with a modular structure. A bypass mechanism vulnerability exists in the Siemens SIMATIC S7-1500. A remote attacker can exploit the vulnerability to bypass the replay protection mechanism with the help of specially crafted packets on TCP port 102...

CVE-2016-2201

Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to bypass a replay protection mechanism via packets on TCP port 102...

CVE-2016-2200

Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to cause a denial of service STOP mode transition via crafted packets on TCP port 102...

CVE-2016-2201

The CVE concerns the Siemens SIMATIC S7-1500 CPU family (before firmware version 1.8.3) where specially crafted packets on TCP port 102 can bypass the device’s replay protection. The issue stems from insufficient replay protection/control flow management, enabling remote attackers to bypass prote...

CVE-2016-2200

The CVE affects Siemens SIMATIC S7-1500 CPU family (before firmware version 1.8.3). A remote attacker can cause a denial-of-service by sending specially crafted TCP packets to port 102, triggering a STOP mode transition; the device reboots and remains in STOP until manual RUN. Root cause: CWE-691...

iniNet SpiderControl PLC Editor Simatic Detection

Binary data scadaappininetspidercontrolplceditorsimaticdetect.nbin...

iniNet SpiderControl PLC Editor Simatic 6.30.04 Local Privilege Escalation

Binary data scadaininetspidercontrolplceditorsimatic63004.nbin...

Siemens Simatic S7 1200 - CPU Command Module (Metasploit)

Siemens Simatic S7 1200 - CPU Command Module Metasploit Exploit Title: Simatic S7 1200 CPU command module Date: 15-12-2015 Exploit Author: Nguyen Manh Hung Vendor Homepage: http://www.siemens.com/ Tested on: Siemens Simatic S7-1214C CVE : None require 'msf/core' class Metasploit3 'Simatic S7-1200...

Siemens Simatic S7 1200 CPU Command Module (MSF) Exploit

Exploit for hardware platform in category remote exploits Exploit Title: Simatic S7 1200 CPU command module Date: 15-12-2015 Exploit Author: Nguyen Manh Hung Vendor Homepage: http://www.siemens.com/ Tested on: Siemens Simatic S7-1214C CVE : None require 'msf/core' class Metasploit3 'Simatic S7-12...

Siemens Simatic S7 1200 - CPU Command Module (Metasploit)

Exploit Title: Simatic S7 1200 CPU command module Date: 15-12-2015 Exploit Author: Nguyen Manh Hung Vendor Homepage: http://www.siemens.com/ Tested on: Siemens Simatic S7-1214C CVE : None require 'msf/core' class Metasploit3 'Simatic S7-1200 CPU START/STOP Module', 'Description' = %q Update 2015...

iniNet SpiderControl PLC Editor Simatic 6.30.04 - Insecure File Permissions

iniNet SpiderControl PLC Editor Simatic 6.30.04 - Insecure File Permissions iniNet SpiderControl PLC Editor Simatic 6.30.04 Insecure File Permissions Vendor: iniNet Solutions GmbH Product web page: http://www.spidercontrol.net Affected version: 6.30.04 Build 6300400 Summary: Modular and automated...

iniNet SpiderControl PLC Editor Simatic 6.30.04 - Insecure File Permissions Vulnerability

Exploit for windows platform in category local exploits iniNet SpiderControl PLC Editor Simatic 6.30.04 Insecure File Permissions Vendor: iniNet Solutions GmbH Product web page: http://www.spidercontrol.net Affected version: 6.30.04 Build 6300400 Summary: Modular and automated engineering is...

iniNet SpiderControl PLC Editor Simatic 6.30.04 - Insecure File Permissions

iniNet SpiderControl PLC Editor Simatic 6.30.04 Insecure File Permissions Vendor: iniNet Solutions GmbH Product web page: http://www.spidercontrol.net Affected version: 6.30.04 Build 6300400 Summary: Modular and automated engineering is provided for HMI and SCADA. The tools are developed to join ...

iniNet SpiderControl PLC Editor Simatic 6.30.04 Privilege Escalation

iniNet SpiderControl PLC Editor Simatic 6.30.04 Insecure File Permissions Vendor: iniNet Solutions GmbH Product web page: http://www.spidercontrol.net Affected version: 6.30.04 Build 6300400 Summary: Modular and automated engineering is provided for HMI and SCADA. The tools are developed to join...

Siemens SIMATIC HMI Basic, SINUMERIK, and Ruggedcom APE GHOST Vulnerability (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-15-064-01 Siemens SIMATIC HMI Basic, SINUMERIK, and Ruggedcom APE GHOST Vulnerability that was published March 5, 2015, on the NCCIC/ICS-CERT web site. The “GHOST”Further information about the GHOST vulnerability:...

Siemens SIMATIC ProSave, SIMATIC CFC, SIMATIC STEP 7, SIMOTION Scout, and STARTER Insufficiently Qualified Paths

OVERVIEW Ivan Sanchez from WiseSecurity Team has identified a search path vulnerability in the Siemens SIMATIC ProSave, SIMATIC CFC, SIMATIC STEP 7, SIMOTION Scout, and STARTER applications. Siemens has produced updates for each of these products that mitigates this vulnerability. AFFECTED PRODUC...

iniNet SpiderControl PLC Editor Simatic 6.30.04 Insecure File Permissions

Summary Modular and automated engineering is provided for HMI and SCADA. The tools are developed to join a large range of engineering modules together quickly. We modularize our software, as the mechanics of a system are modularized today. Easy to visualize with a few clicks. Description...

Siemens SIMATIC Communicator Module Information Disclosure Vulnerability

Siemens SIMATIC CP 343-1/TIM 3V-IE/TIM 4R-IE/CP 443-1 are communicator modules. Siemens SIMATIC CP 343-1 Advanced devices prior to version 3.0.44, CP 343-1 Lean, CP 343-1, TIM 3V-IE, TIM 3V-IE Advanced, TIM 3V-IE DNP3, TIM 4R-IE, TIM 4R-IE DNP3, CP 443-1 , CP 443-1 Advanced A security vulnerabili...

Code injection

A vulnerability has been identified in SIMATIC NET CP 342-5 incl. SIPLUS variants All versions, SIMATIC NET CP 343-1 Advanced incl. SIPLUS variants All versions V3.0.44, SIMATIC NET CP 343-1 Lean incl. SIPLUS variants All versions V3.1.1, SIMATIC NET CP 343-1 Standard incl. SIPLUS variants All...