CVE-2015-8214

A vulnerability has been identified in SIMATIC NET CP 342-5 incl. SIPLUS variants All versions, SIMATIC NET CP 343-1 Advanced incl. SIPLUS variants All versions V3.0.44, SIMATIC NET CP 343-1 Lean incl. SIPLUS variants All versions V3.1.1, SIMATIC NET CP 343-1 Standard incl. SIPLUS variants All...

CVE-2015-8214

A vulnerability has been identified in SIMATIC NET CP 342-5 incl. SIPLUS variants All versions, SIMATIC NET CP 343-1 Advanced incl. SIPLUS variants All versions V3.0.44, SIMATIC NET CP 343-1 Lean incl. SIPLUS variants All versions V3.1.1, SIMATIC NET CP 343-1 Standard incl. SIPLUS variants All...

CVE-2015-8214

CVE-2015-8214 affects Siemens SIMATIC CP modules (CP 342-5, CP 343-1 variants, CP 443-1 variants, TIM 3V-IE/4R-IE, including SIPLUS) across many versions. Root cause: the access protection layer could allow unauthenticated users to perform administrative operations if network access to port 102/T...

Siemens SIMATIC Communication Processor Vulnerability (Update C)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SIMATIC Communication Processor Vulnerability: Authentication Bypass Issues 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update titled ICSA-15-335-03...

Siemens SIMATIC STEP 7 TIA Portal Vulnerabilities (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-15-050-01 Siemens SIMATIC STEP 7 TIA Portal Vulnerabilities that was published February 19, 2015, on the NCCIC/ICS-CERT web site. Siemens has identified two vulnerabilities in its SIMATIC STEP 7 TIA Portal. Siemens...

Siemens SIMATIC STEP 7 TIA Portal Vulnerabilities

OVERVIEW Aleksandr Timorin from Positive Technologies has identified authentication vulnerabilities in the Siemens SIMATIC STEP 7 TIA Portal application. Siemens has produced a service pack that mitigates these vulnerabilities. AFFECTED PRODUCTS The following Siemens products are affected: SIMATI...

Siemens SIMATIC WinCC TIA Portal Vulnerabilities

OVERVIEW Gleb Gritsai, Roman Ilin, Aleksandr Tlyapov, and Sergey Gordeychik from Positive Technologies have identified authentication vulnerabilities in the Siemens SIMATIC WinCC TIA Portal application. Siemens has produced a service pack that mitigates these vulnerabilities. These vulnerabilitie...

Siemens SIMATIC WinCC Sm@rtClient iOS Application Authentication Vulnerabilities

OVERVIEW Siemens has identified authentication vulnerabilities in the SIMATIC WinCC Sm@rt Client application. These vulnerabilities were reported directly to Siemens by Kim Schlyter, Seyton Bradford, and Richard Warren from FortConsult NCC Group. Siemens has produced an update that mitigates thes...

Siemens SIMATIC S7-1500 CPU PLC 跨站请求伪造漏洞

.... Siemens SIMATIC S7-1500 CPU PLC是德国西门子（Siemens）公司的一款TIA博途（集成自动化软件）中的新一代控制器。 .... 使用1.1.2及之前版本固件的Siemens SIMATIC S7-1500 CPU PLC设备中存在跨站请求伪造漏洞。远程攻击者可利用该漏洞执行未授权操作。...

SIEMENS SIMATIC S7-400 拒绝服务漏洞

Siemens SIMATIC S7-400 PN CPU固件设备6 6.0.3之前的6版本中存在漏洞。远程攻击者可利用该漏洞通过特制的ICMP数据包导致拒绝服务（缺陷模式过度和服务中断）。...

Siemens SIMATIC S7-1500 CPU设备安全漏洞

No description provided by source...

The vulnerabilities of the software programs WinCC, Simatic NET PC-Software, Simatic Automation Tool, and Simatic HMI allow a perpetrator to successfully pass the authentication process.

The vulnerabilities of the WinCC software, Simatic NET PC-Software, Simatic Automation Tool, and Simatic HMI are related to deficiencies in password verification procedures. Exploiting these vulnerabilities can allow unauthorized users to successfully authenticate themselves by using the hash val...

Siemens SIMATIC WinCC Sm@rtClient和SIMATIC WinCC Sm@rtClient Lite 信息泄露漏洞

No description provided by source...

Siemens SIMATIC S7-1200固件版本低于4.1.3的设备跨站伪造请求（CSRF）漏洞

漏洞分析 Siemens SIMATIC S7-1200的web端可以与控制PLC的运行以及设备状态数据的获取。而固件版本低于4.1.3的web存在跨站请求伪造（CSRF）漏洞。 由于S7-1200的web端并没有采取针对CSRF攻击的防范措施，如验证HTTP Referer字段，因此攻击者可以实施CSRF攻击，在未授权的情况下进行PLC运行状态改变，更新固件等敏感操作。 漏洞验证 我们通过zoomeye，搜索到一款SIMATIC S7-1200，固件版本号为v3.00.01，经过测试发现存在CSRF漏洞。 验证过程：...

Siemens SIMATIC S7-1200 CSRF Vulnerability (SSA-134003)

Siemens SIMATIC S7-1200 devices are prone to a cross-site request forgery CSRF vulnerability. Copyright C 2015 Greenbone Networks GmbHi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-lat...

CVE-2015-5698

Cross-site request forgery CSRF vulnerability in the web server on Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the web server on Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2015-5698

Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1.3 expose a CSRF vulnerability in the web server. The issue enables remote attackers to hijack user authentication via unspecified vectors. Impact is authentication compromise; firmware 4.1.3 or later is the stated fix. No exploitation d...

PT-2015-7043 · Siemens · Simatic S7-1200 Cpu

Name of the Vulnerable Software and Affected Versions: Siemens SIMATIC S7-1200 CPU devices with firmware prior to 4.1.3 Description: A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of victims via unknown vectors. Recommendations: For firmware...

CVE-2015-5698

Cross-site request forgery CSRF vulnerability in the web server on Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...