SIMATIC WinCC DataMonitor Input Validation Arbitrary Code Load

The vulnerability of the SIMATIC WinCC DataMonitor web application is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to upload any arbitrary ASPX code remotely...

PT-2019-3865

Name of the Vulnerable Software and Affected Versions SIMATIC PCS 7 versions V8.0 and earlier SIMATIC PCS 7 version V8.1 through V8.1 with WinCC V7.3 Upd 18 SIMATIC PCS 7 version V8.2 through V8.2 SP1 with WinCC V7.4 SP1 Upd 10 SIMATIC PCS 7 version V9.0 through V9.0 SP2 with WinCC V7.4 SP1 Upd 1...