Siemens WinCC and SIMATIC HMI Panels < 11.0.2.1 Client Side File Injection

Binary data 720007.prm...

Siemens Multiple Devices Remote Code Execution

Binary data 720142.prm...

Siemens SIMATIC HMI Panels < 15.4 Integrated Webserver URL Redirection

Binary data 720166.prm...

Siemens WinCC and SIMATIC HMI Panels Default Password

Binary data 720003.prm...

Siemens SIMATIC HMI Panels < 15.4 Directory Traversal

Binary data 720165.prm...

Siemens WinCC and SIMATIC HMI Panels < 11.0.2.1 Header Injection

Binary data 720006.prm...

Siemens SIMATIC S7-1500 < 1.5 and S7-1200 PLCs < 4.0 Cross Site Request Forgery

Binary data 720192.prm...

Siemens Multiple Devices Profinet DCP Denial of Service

Binary data 720111.prm...

Siemens CP 1616 Onboard card of SIMATIC IPCs Communications Adapter Detection

Binary data 762019.prm...

Siemens SIMATIC S5 SINGLE PLC FOR S5-95F REDUNDANT SYSTEM PLC Detection

Binary data 750060.prm...

The vulnerability of microprogrammed software in programmable logic controllers from SIMATIC, related to insufficient validation of input data, allows a malicious actor to trigger malfunctions during maintenance operations.

The vulnerability of microprogrammed software in programmable logic controllers from SIMATIC is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious individual to cause malfunctions in service operations by sending specially crafted packets to po...

CVE-2018-16559

A vulnerability has been identified in SIMATIC S7-1500 CPU All versions = V2.0 and V2.5, SIMATIC S7-1500 CPU All versions = V1.8.5. Specially crafted network packets sent to port 80/tcp or 443/tcp could allow an unauthenticated remote attacker to cause a Denial-of-Service condition of the device...

CVE-2018-16559

A vulnerability has been identified in SIMATIC S7-1500 CPU All versions = V2.0 and V2.5, SIMATIC S7-1500 CPU All versions = V1.8.5. Specially crafted network packets sent to port 80/tcp or 443/tcp could allow an unauthenticated remote attacker to cause a Denial-of-Service condition of the device...

CVE-2018-16558

A vulnerability has been identified in SIMATIC S7-1500 CPU All versions = V2.0 and V2.5, SIMATIC S7-1500 CPU All versions = V1.8.5. Specially crafted network packets sent to port 80/tcp or 443/tcp could allow an unauthenticated remote attacker to cause a Denial-of-Service condition of the device...

CVE-2018-16561

A vulnerability has been identified in SIMATIC S7-300 CPUs All versions V3.X.16. The affected CPUs improperly validate S7 communication packets which could cause a Denial-of-Service condition of the CPU. The CPU will remain in DEFECT mode until manual restart. Successful exploitation requires an...

Race condition

A vulnerability has been identified in SIMATIC S7-1500 CPU All versions = V2.0 and V2.5, SIMATIC S7-1500 CPU All versions = V1.8.5. Specially crafted network packets sent to port 80/tcp or 443/tcp could allow an unauthenticated remote attacker to cause a Denial-of-Service condition of the device...

Design/Logic Flaw

A vulnerability has been identified in SIMATIC S7-300 CPUs All versions V3.X.16. The affected CPUs improperly validate S7 communication packets which could cause a Denial-of-Service condition of the CPU. The CPU will remain in DEFECT mode until manual restart. Successful exploitation requires an...

Race condition

A vulnerability has been identified in SIMATIC S7-1500 CPU All versions = V2.0 and V2.5, SIMATIC S7-1500 CPU All versions = V1.8.5. Specially crafted network packets sent to port 80/tcp or 443/tcp could allow an unauthenticated remote attacker to cause a Denial-of-Service condition of the device...

CVE-2019-6575

A vulnerability has been identified in SIMATIC CP 443-1 OPC UA All versions, SIMATIC ET 200SP Open Controller CPU 1515SP PC2 incl. SIPLUS variants All versions = V2.5 V2.6.1, SIMATIC S7-1500 Software Controller All versions between V2.5 including and V2.7 excluding, SIMATIC WinCC OA All versions...

CVE-2019-6575

CVE-2019-6575 affects Siemens industrial products using OPC UA, including SIMATIC CP443-1 OPC UA, ET 200 Open Controller CPU 1515SP PC2, HMI Outdoor Panels (7"/15"), HMI Comfort Panels (4"–22"), KTP Mobile Panels, IPC DiagMonitor, NET PC Software, RF188C, RF600R, S7‑1500 family, WinCC OA/Runtime,...