CVE-2013-0677

The web server in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote attackers to obtain sensitive information or cause a denial of service via a crafted project file...

CVE-2013-0678

Siemens WinCC (before 7.2, used in SIMATIC PCS7 before 8.0 SP1) stores WebNavigator passwords in an MS SQL database without proper protection, enabling remote authenticated users with DB access to read credentials and obtain sensitive information. The root cause is information disclosure due to m...

PT-2013-2521

Name of the Vulnerable Software and Affected Versions Siemens WinCC versions prior to 7.2 SIMATIC PCS7 versions prior to 8.0 SP1 Description The issue allows remote authenticated users to obtain sensitive information via a SQL query due to improper assignment of privileges for the database...

PT-2013-2519

Name of the Vulnerable Software and Affected Versions Siemens WinCC versions prior to 7.2 SIMATIC PCS7 versions prior to 8.0 SP1 Description The issue is related to a buffer overflow in the RegReader ActiveX control. This allows remote attackers to execute arbitrary code via a long parameter...

PT-2013-2522

Name of the Vulnerable Software and Affected Versions Siemens WinCC versions prior to 7.2 SIMATIC PCS7 versions prior to 8.0 SP1 Description The issue allows remote attackers to obtain sensitive information or cause a denial of service by using a crafted project file. Recommendations For Siemens...

PT-2013-2523

Name of the Vulnerable Software and Affected Versions Siemens WinCC versions prior to 7.2 SIMATIC PCS7 versions prior to 8.0 SP1 Description The issue is related to the improper representation of WebNavigator credentials in a database. This makes it easier for remote authenticated users to obtain...

PT-2013-2524

Name of the Vulnerable Software and Affected Versions Siemens WinCC versions prior to 7.2 SIMATIC PCS7 versions prior to 8.0 SP1 Description A directory traversal issue in the web server allows remote authenticated users to read arbitrary files by querying a pathname. Recommendations For Siemens...

CVE-2013-0678: Undefined Security Weakness

Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, does not properly represent WebNavigator credentials in a database, which makes it easier for remote authenticated users to obtain sensitive information via a SQL query...

CVE-2013-0675: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in CCEServer aka the central communications component in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote attackers to cause a denial of service via a crafted packet...

CVE-2013-0674: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the RegReader ActiveX control in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote attackers to execute arbitrary code via a long parameter...

CVE-2013-0676: Undefined Security Weakness

Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, does not properly assign privileges for the database containing WebNavigator credentials, which allows remote authenticated users to obtain sensitive information via a SQL query...

CVE-2013-0677: Exposure of Sensitive Information to an Unauthorized Actor

The web server in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote attackers to obtain sensitive information or cause a denial of service via a crafted project file...

CVE-2013-0679: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the web server in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote authenticated users to read arbitrary files via vectors involving a query for a pathname...

PT-2013-1037

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC versions prior to 7.3 Description The issue allows a local user to gain limited elevated privileges of the operating system user by leveraging weak system-object access control. This could potentially be exploited to gain...

PT-2013-43: Hard-coded credentials in Siemens WinCC and SIMATIC PCS 7

The specialists of the Positive Research center have detected a vulnerability in Siemens WinCC and SIMATIC PCS 7 related to hard-coded credentials used in the login system . Attackers with network access and knowledge of the credentials could log into the Web Navigator Web applications as an...

Siemens SIMATIC RF-MANAGER KeyHelp.ocx Buffer Overflow

Binary data scadasiemensrfmanageractivex.nbin...

Siemens SIMATIC RF-MANAGER Detection

Binary data scadaappsiemensrfmanagerdetect.nbin...

Buffer overflow

Buffer overflow in a third-party ActiveX component in Siemens SIMATIC RF-MANAGER 2008, and RF-MANAGER Basic 3.0 and earlier, allows remote attackers to execute arbitrary code via a crafted web site...

CVE-2013-0656

Buffer overflow in a third-party ActiveX component in Siemens SIMATIC RF-MANAGER 2008, and RF-MANAGER Basic 3.0 and earlier, allows remote attackers to execute arbitrary code via a crafted web site...

CVE-2013-0656

The CVE-2013-0656 vulnerability concerns a heap-based buffer overflow in a third-party ActiveX component used by Siemens SIMATIC RF Manager products. Affected are SIMATIC RF Manager 2008 and RF Manager Basic v3.0 and earlier; the overflow arises when processing content from a crafted web site, en...