EUVD-2016-8807

Malware in sbrugna...

EUVD-2015-1732

Malware in sbrugna...

EUVD-2016-8808

Malware in sbrugna...

Siemens SIMATIC STEP Deserialization Vulnerability

Siemens SIMATIC STEP is a comprehensive engineering tool for configuring and programming SIMATIC controllers from Siemens, Germany. A deserialization vulnerability exists in Siemens SIMATIC STEP, which arises from an affected application failing to properly restrict .NET BinaryFormatter when...

Siemens SIMATIC STEP 代码问题漏洞

Siemens SIMATIC STEP is a comprehensive engineering tool for configuring and programming SIMATIC controllers from Siemens, Germany. A deserialization vulnerability exists in Siemens SIMATIC STEP, which arises from an affected application failing to properly restrict .NET BinaryFormatter when...

Siemens SIMATIC STEP 7 Information Disclosure Vulnerability

Siemens SIMATIC STEP 7 TIA Portal is a suite of programming software for SIMATIC controllers from Siemens, Germany. The software provides PLC programming, design option packages and advanced drive technology. A security vulnerability exists in Siemens SIMATIC STEP 7 TIA Portal versions prior to...

CVE-2016-7959: Undefined Security Weakness

Siemens SIMATIC STEP 7 TIA Portal before 14 improperly stores pre-shared key data in TIA project files, which makes it easier for local users to obtain sensitive information by leveraging access to a file and conducting a brute-force attack...

CVE-2016-7960: Exposure of Sensitive Information to an Unauthorized Actor

Siemens SIMATIC STEP 7 TIA Portal before 14 uses an improper format for managing TIA project files during version updates, which makes it easier for local users to obtain sensitive configuration information via unspecified vectors...

Default credentials

Siemens SIMATIC STEP 7 TIA Portal 12 and 13 before 13 SP1 Upd1 improperly stores password data within project files, which makes it easier for local users to determine cleartext 1 protection-level passwords or 2 web-server passwords by leveraging the ability to read these files...

PT-2015-5381

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC STEP 7 TIA Portal versions 12 and 13 before 13 SP1 Upd1 Description The issue allows man-in-the-middle attackers to obtain sensitive information or modify transmitted data via unspecified vectors. Recommendations For versions 1...

CVE-2015-1601: Undefined Security Weakness

Siemens SIMATIC STEP 7 TIA Portal 12 and 13 before 13 SP1 Upd1 allows man-in-the-middle attackers to obtain sensitive information or modify transmitted data via unspecified vectors...

CVE-2015-1602: Exposure of Sensitive Information to an Unauthorized Actor

Siemens SIMATIC STEP 7 TIA Portal 12 and 13 before 13 SP1 Upd1 improperly stores password data within project files, which makes it easier for local users to determine cleartext 1 protection-level passwords or 2 web-server passwords by leveraging the ability to read these files...

PT-2015-5382

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC STEP 7 TIA Portal versions 12 and 13 before 13 SP1 Upd1 Description The issue improperly stores password data within project files. This makes it easier for local users to determine cleartext protection-level passwords or...

PT-2015-5375

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC ProSave versions prior to 13 SP1 Siemens SIMATIC CFC versions prior to 8.0 SP4 Upd9 and 8.1 Upd1 Siemens SIMATIC STEP 7 versions prior to 5.5 SP1 HF2, 5.5 SP2 HF7, 5.5 SP3, and 5.5 SP4 HF4 Siemens SIMOTION Scout versions prior ...

CVE-2015-1356: Undefined Security Weakness

Siemens SIMATIC STEP 7 TIA Portal before 13 SP1 determines a user's privileges on the basis of project-file fields that lack integrity protection, which allows remote attackers to establish arbitrary authorization data via a modified file...

PT-2015-5230

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC STEP 7 TIA Portal versions prior to 13 SP1 Description The issue allows local users to determine cleartext passwords by reading a project file and conducting a brute-force attack due to the use of a weak password-hash algorithm...

PT-2015-5231

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC STEP 7 TIA Portal versions prior to 13 SP1 Description The issue allows remote attackers to establish arbitrary authorization data by modifying project files that lack integrity protection, which determines a user's privileges...

CVE-2015-1355: Undefined Security Weakness

Siemens SIMATIC STEP 7 TIA Portal before 13 SP1 uses a weak password-hash algorithm, which makes it easier for local users to determine cleartext passwords by reading a project file and conducting a brute-force attack...

PT-2015-3310

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC STEP 7 TIA Portal versions prior to 14 Description The issue is related to the incorrect storage of pre-shared keys in TIA project files. This could allow a local attacker to gain access to sensitive information, potentially by...

PT-2015-3311

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC STEP 7 TIA Portal versions prior to 14 Description The issue is related to the use of an improper format for managing TIA project files during version updates. This can allow a local attacker to obtain sensitive configuration...