The vulnerabilities of the microprogramming software for Siemens STEP 7 programmable logic controllers, the systems for managing production processes such as Opcenter Execution Discrete, Opcenter Execution Process, Opcenter Execution Foundation, Opcenter Intelligence, Opcenter Quality, SIMATIC IT Production Suite, the system diagnostic tool SIMOCODE ES, the software for parameterizing, diagnosing, and documenting the startup process of SIRIUS Soft Starter ES, the web-based systems for managing technological processes like SIMATIC PCS neo, the Opcenter RD&L software platform, and the software for analyzing equipment efficiency and key indicators like SIMATIC IT LMS. These vulnerabilities arise from the absence of quotation marks in the wording of elements or search methods, which allows attackers to exploit them to gain elevated privileges to the root level.

The vulnerabilities of the microprogramming software for Siemens STEP 7 programmable logic controllers, the systems for managing production processes such as Opcenter Execution Discrete, Opcenter Execution Process, Opcenter Execution Foundation, Opcenter Intelligence, Opcenter Quality, SIMATIC IT...

Vulnerability of microprogramming software for Siemens STEP 7 programmable logic controllers, systems for manufacturing process control such as Opcenter Execution Discrete, Opcenter Execution Process, Opcenter Execution Foundation, Opcenter Intelligence, Opcenter Quality, SIMATIC IT Production Suite, the system diagnostic tool SIMOCODE ES, the software for parameterizing, diagnosing, and documenting the startup status of SIRIUS Soft Starter ES, technological process management systems like SIMATIC PCS neo, the Opcenter RD&L software platform, and the software for analyzing equipment efficiency and key indicators like SIMATIC IT LMS. These vulnerabilities allow attackers to trigger malfunctions during maintenance operations due to insufficient input data verification.

The vulnerabilities of the microprogramming software for Siemens STEP 7 programmable logic controllers, the systems for managing production processes such as Opcenter Execution Discrete, Opcenter Execution Process, Opcenter Execution Foundation, Opcenter Intelligence, Opcenter Quality, SIMATIC IT...

CVE-2020-7587: Uncontrolled Resource Consumption

A vulnerability has been identified in Opcenter Execution Discrete All versions V3.2, Opcenter Execution Foundation All versions V3.2, Opcenter Execution Process All versions V3.2, Opcenter Intelligence All versions V3.3, Opcenter Quality All versions V11.3, Opcenter RD&L V8.0, SIMATIC IT LMS All...

PT-2020-6696 · Siemens · Simocode Es +12

Name of the Vulnerable Software and Affected Versions: Opcenter Execution Discrete versions prior to V3.2 Opcenter Execution Foundation versions prior to V3.2 Opcenter Execution Process versions prior to V3.2 Opcenter Intelligence versions prior to V3.3 Opcenter Quality versions prior to V11.3...

Siemens Industrial Products Local Privilege Escalation Vulnerability (Update I)

1. EXECUTIVE SUMMARY CVSS v3 6.4 ATTENTION: Exploitable locally Vendor: Siemens Equipment: Industrial Products Vulnerability: Improper privilege management 2. UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory titled ICSA-16-313-02 Siemens Industrial Products Local...

Design/Logic Flaw

A vulnerability has been identified in SIMATIC IT LMS All versions, SIMATIC IT Production Suite Versions V7.1 V7.1 Upd3, SIMATIC IT UA Discrete Manufacturing Versions V1.2, SIMATIC IT UA Discrete Manufacturing Versions V1.2, SIMATIC IT UA Discrete Manufacturing Versions V1.3, SIMATIC IT UA Discre...

CVE-2018-13804

A vulnerability has been identified in SIMATIC IT LMS All versions, SIMATIC IT Production Suite Versions V7.1 V7.1 Upd3, SIMATIC IT UA Discrete Manufacturing Versions V1.2, SIMATIC IT UA Discrete Manufacturing Versions V1.2, SIMATIC IT UA Discrete Manufacturing Versions V1.3, SIMATIC IT UA Discre...

CVE-2018-13804

Summary: CVE-2018-13804 affects Siemens SIMATIC IT LMS (all versions), SIMATIC IT Production Suite (7.1 prior to Upd3), and SIMATIC IT UA Discrete Manufacturing (prior to 2.4). An attacker with arbitrary network access and a valid username can bypass the application-level authentication, with no ...

CVE-2018-13804: Improper Authentication

A vulnerability has been identified in SIMATIC IT LMS All versions, SIMATIC IT Production Suite Versions V7.1 V7.1 Upd3, SIMATIC IT UA Discrete Manufacturing Versions V1.2, SIMATIC IT UA Discrete Manufacturing Versions V1.2, SIMATIC IT UA Discrete Manufacturing Versions V1.3, SIMATIC IT UA Discre...

CVE-2017-12069

An XXE vulnerability has been identified in OPC Foundation UA .NET Sample Code before 2017-03-21 and Local Discovery Server LDS before 1.03.367. Among the affected products are Siemens SIMATIC PCS7 All versions V8.1 and earlier, SIMATIC WinCC All versions V7.4 SP1, SIMATIC WinCC Runtime...

CVE-2017-12069

An XXE vulnerability has been identified in OPC Foundation UA .NET Sample Code before 2017-03-21 and Local Discovery Server LDS before 1.03.367. Among the affected products are Siemens SIMATIC PCS7 All versions V8.1 and earlier, SIMATIC WinCC All versions V7.4 SP1, SIMATIC WinCC Runtime...

CVE-2017-12069: Improper Restriction of XML External Entity Reference

An XXE vulnerability has been identified in OPC Foundation UA .NET Sample Code before 2017-03-21 and Local Discovery Server LDS before 1.03.367. Among the affected products are Siemens SIMATIC PCS7 All versions V8.1 and earlier, SIMATIC WinCC All versions V7.4 SP1, SIMATIC WinCC Runtime...

CVE-2016-7165: Improper Access Control

A vulnerability has been identified in Primary Setup Tool PST All versions V4.2 HF1, SIMATIC IT Production Suite All versions V7.0 SP1 HFX 2, SIMATIC NET PC-Software All versions V14, SIMATIC PCS 7 V7.1 All versions, SIMATIC PCS 7 V8.0 All versions, SIMATIC PCS 7 V8.1 All versions, SIMATIC PCS 7...