CVE-2017-12069

An XXE vulnerability has been identified in OPC Foundation UA .NET Sample Code before 2017-03-21 and Local Discovery Server LDS before 1.03.367. Among the affected products are Siemens SIMATIC PCS7 All versions V8.1 and earlier, SIMATIC WinCC All versions V7.4 SP1, SIMATIC WinCC Runtime...

CVE-2017-12069

An XXE vulnerability has been identified in OPC Foundation UA .NET Sample Code before 2017-03-21 and Local Discovery Server LDS before 1.03.367. Among the affected products are Siemens SIMATIC PCS7 All versions V8.1 and earlier, SIMATIC WinCC All versions V7.4 SP1, SIMATIC WinCC Runtime...

CVE-2017-12069

Summary: CVE-2017-12069 is an XXE vulnerability in the OPC UA Discovery Server handling of XML, affecting Siemens products using the OPC UA Stack (e.g., SIMATIC PCS 7, SIMATIC WinCC, SIMATIC WinCC Runtime Professional, SIMATIC NET PC Software, and IT Production Suite). Root cause: Improper restri...

PT-2017-12334

Name of the Vulnerable Software and Affected Versions OPC Foundation UA .NET Sample Code versions prior to 2017-03-21 Local Discovery Server LDS versions prior to 1.03.367 Siemens SIMATIC PCS7 versions 8.1 and earlier Siemens SIMATIC WinCC versions prior to 7.4 SP1 Siemens SIMATIC WinCC Runtime...

CVE-2017-12069: Improper Restriction of XML External Entity Reference

An XXE vulnerability has been identified in OPC Foundation UA .NET Sample Code before 2017-03-21 and Local Discovery Server LDS before 1.03.367. Among the affected products are Siemens SIMATIC PCS7 All versions V8.1 and earlier, SIMATIC WinCC All versions V7.4 SP1, SIMATIC WinCC Runtime...

CVE-2017-6865: Improper Input Validation

A vulnerability has been identified in Primary Setup Tool PST All versions V4.2 HF1, SIMATIC Automation Tool All versions V3.0, SIMATIC NET PC-Software All versions V14 SP1, SIMATIC PCS 7 V8.1 All versions, SIMATIC PCS 7 V8.2 All versions V8.2 SP1, SIMATIC STEP 7 TIA Portal V13 All versions V13...

PT-2017-3766

Name of the Vulnerable Software and Affected Versions: SIMATIC Automation Tool versions prior to V3.0 SIMATIC NET PC-Software versions prior to V14 SP1 SIMATIC PCS 7 V8.1 all versions SIMATIC PCS 7 V8.2 versions prior to V8.2 SP1 SIMATIC STEP 7 TIA Portal V13 versions prior to V13 SP2 SIMATIC STE...

CVE-2016-7165: Improper Access Control

A vulnerability has been identified in Primary Setup Tool PST All versions V4.2 HF1, SIMATIC IT Production Suite All versions V7.0 SP1 HFX 2, SIMATIC NET PC-Software All versions V14, SIMATIC PCS 7 V7.1 All versions, SIMATIC PCS 7 V8.0 All versions, SIMATIC PCS 7 V8.1 All versions, SIMATIC PCS 7...

Siemens Discloses Local Privilege Escalation Bug in SCADA Gear

German engineering giant Siemens is warning operators of a local privilege escalation vulnerability that leaves more than a dozen models of its SCADA equipment open to attack. Some of the issues have been patched, or in other cases, Siemens has provided a workaround. The vulnerability was disclos...

CVE-2016-5874: Improper Input Validation

Siemens SIMATIC NET PC-Software before 13 SP2 allows remote attackers to cause a denial of service OPC UA service outage via crafted TCP packets...

PT-2016-6718

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC NET PC-Software versions prior to 13 SP2 Description The issue allows remote attackers to cause a denial of service, specifically an OPC UA service outage, by sending crafted TCP packets. Recommendations For versions prior to 1...

Siemens SIMATIC NET PC-Software Denial-of-Service Vulnerability

OVERVIEW Siemens has identified a denial-of-service vulnerability in SIMATIC NET PC-Software. Vladimir Dashchenko and Sergey Temnikov from Kaspersky Labs reported this issue directly to Siemens. Siemens has produced a new version to mitigate this vulnerability. This vulnerability could be exploit...