CVE-2015-1355

Siemens SIMATIC STEP 7 TIA Portal before 13 SP1 uses a weak password-hash algorithm, which makes it easier for local users to determine cleartext passwords by reading a project file and conducting a brute-force attack...

Authorization

Siemens SIMATIC STEP 7 TIA Portal before 13 SP1 determines a user's privileges on the basis of project-file fields that lack integrity protection, which allows remote attackers to establish arbitrary authorization data via a modified file...

Default credentials

Siemens SIMATIC STEP 7 TIA Portal before 13 SP1 uses a weak password-hash algorithm, which makes it easier for local users to determine cleartext passwords by reading a project file and conducting a brute-force attack...

Code injection

The remote-management module in the 1 Multi Panels, 2 Comfort Panels, and 3 RT Advanced functionality in Siemens SIMATIC WinCC TIA Portal before 13 SP1 and in the 4 panels and 5 runtime functionality in SIMATIC WinCC flexible before 2008 SP3 Up7 does not properly encrypt credentials in transit,...

CVE-2015-1355

Siemens SIMATIC STEP 7 TIA Portal before 13 SP1 uses a weak password-hash algorithm, which makes it easier for local users to determine cleartext passwords by reading a project file and conducting a brute-force attack...

CVE-2015-1358

The remote-management module in the 1 Multi Panels, 2 Comfort Panels, and 3 RT Advanced functionality in Siemens SIMATIC WinCC TIA Portal before 13 SP1 and in the 4 panels and 5 runtime functionality in SIMATIC WinCC flexible before 2008 SP3 Up7 does not properly encrypt credentials in transit,...

CVE-2015-1358

Siemens SIMATIC WinCC (TIA Portal) CVE-2015-1358: The remote-management modules in WinCC (TIA Portal) Multi Panels, Comfort Panels and RT Advanced, and in WinCC Flexible panels/runtime before the stated SPs, transmit credentials in weak or unencrypted form. This allows network-sniffing attackers ...

CVE-2015-1356

Siemens SIMATIC STEP 7 TIA Portal before 13 SP1 determines a user's privileges on the basis of project-file fields that lack integrity protection, which allows remote attackers to establish arbitrary authorization data via a modified file...

CVE-2015-1356

Siemens SIMATIC STEP 7 TIA Portal (pre-13 SP1) stores device user privileges in project files with insufficient integrity protection, enabling modification of authorization data via a manipulated file and leading to privilege escalation. Mitigation: apply Siemens STEP 7 TIA Portal V13 Service Pac...

CVE-2015-1355

Siemens SIMATIC STEP 7 TIA Portal (all versions prior to V13 SP1) is vulnerable due to use of a weak password-hashing algorithm for device user passwords stored in TIA Portal project files. Local users with read access to a project file could potentially reconstruct plaintext passwords. Siemens r...

Siemens Fixes Redirect Vulnerability in SIMATIC PLC

Siemens has patched a web vulnerability in its SIMATIC PLC family of products that could have led unsuspecting users to malicious sites. According to an advisory on the Industrial Control Systems Cyber Emergency Response Team‘s ICS-CERT site Thursday, the bug was an open redirect vulnerability th...

Siemens SIMATIC S7-1200 Open Redirect Vulnerability

The Siemens SIMATIC S7-1200 is a modular PLC controller. An open redirection vulnerability exists in integrated web server on Siemens SIMATIC S7-1200 CPU devices with firmware prior to version 4.1, which allows remote attackers to redirect a user to an arbitrary web site via an unspecified vector...

CVE-2015-1048

CVE-2015-1048 affects Siemens SIMATIC S7-1200 CPU family with firmware prior to 4.1. The vulnerability is an open redirect in the integrated web server that could allow remote attackers to redirect users to arbitrary sites, enabling phishing attempts via unspecified vectors. Public sources (NVD, ...

PT-2016-14: Information Disclosure in Siemens SIMATIC STEP 7 (TIA Portal)

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Siemens SIMATIC STEP 7 TIA Portal. Siemens SIMATIC STEP 7 TIA Portal uses an improper format for managing TIA project files during version updates, which makes it easier for local users to...

PT-2016-13: Information Disclosure in Siemens SIMATIC STEP 7 (TIA Portal)

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Siemens SIMATIC STEP 7 TIA Portal. The vulnerability improperly stores pre-shared key data in TIA project files, which makes it easier for local users to obtain sensitive information. How to f...

Siemens SIMATIC WinCC Sm@rtClient app Information Disclosure Vulnerability

Siemens SIMATIC WinCC is the monitoring control and data acquisition SCADA and HMI system. An information disclosure vulnerability exists in Siemens SIMATIC WinCC Sm@rtClient app versions prior to 1.0.2, which allows an attacker to discover Sm@rtServer credentials by exploiting an error in the...

Siemens SIMATIC WinCC Sm@rtClient app information disclosure vulnerability (CNVD-2015-00426)

Siemens SIMATIC WinCC is the monitoring control and data acquisition SCADA and HMI system. An information disclosure vulnerability exists in the Siemens SIMATIC WinCC Sm@rtClient app prior to version 1.0.2, which allows an attacker to extract passwords from srage via an unspecified vector...

CVE-2014-5233

The Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows physically proximate attackers to discover Sm@rtServer credentials by leveraging an error in the credential-processing mechanism...

Code injection

The Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows physically proximate attackers to discover Sm@rtServer credentials by leveraging an error in the credential-processing mechanism...

CVE-2014-5232

Siemens SIMATIC WinCC Sm@rtClient for iOS is vulnerable prior to version 1.0.2 due to insufficiently protected credentials and improper authentication. When the app resumes from the background, an attacker with local access could bypass the required application password, potentially gaining acces...