CVE-2016-6486

Siemens SINEMA Server uses weak permissions for the application folder, which allows local users to gain privileges via unspecified vectors...

Code injection

Siemens SINEMA Server uses weak permissions for the application folder, which allows local users to gain privileges via unspecified vectors...

CVE-2016-6486: Undefined Security Weakness

Siemens SINEMA Server uses weak permissions for the application folder, which allows local users to gain privileges via unspecified vectors...

CVE-2016-6486

Siemens SINEMA Server contains a local privilege-escalation flaw (CVE-2016-6486) caused by improper access control on the server application folder. According to ICS-CERT/ZDI/OpenVAS details, authenticated OS users may leverage weak permissions to execute code with higher privileges, not remotely...

CVE-2016-6486

Siemens SINEMA Server uses weak permissions for the application folder, which allows local users to gain privileges via unspecified vectors...

PT-2016-6950

Name of the Vulnerable Software and Affected Versions Siemens SINEMA Server affected versions not specified Description The issue concerns weak permissions for the application folder in Siemens SINEMA Server, allowing local users to gain privileges through unspecified vectors. Recommendations At...

Siemens SINEMA Server Elevation of Privilege Vulnerability

SINEMA Server is Siemens industrial network management software. It can quickly diagnose the communication status of industrial Ethernet, industrial switch SCALANCE, PROFINET and network devices such as CP443-1, CP343-1, ET200PN. An elevation of privilege vulnerability exists in Siemens SINEMA...

Siemens SINEMA Server Privilege Escalation Vulnerability (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-16-215-02 Siemens SINEMA Server Privilege Escalation Vulnerability that was published August 2, 2016, on the NCCIC/ICS-CERT web site. --------- Begin Update A Part 1 of 2 -------- Security researcher rgod working...

Siemens SINEMA Remote Connect Server Cross-Site Scripting Vulnerability

Siemens SINEMA Remote Connect Server is a server application. SINEMA Remote Connect allows users to access remote equipment or machines so that maintenance can be performed easily and safely. A cross-site scripting vulnerability exists in Siemens SINEMA Remote Connect Server. An attacker could...

CVE-2016-6204

Cross-site scripting XSS vulnerability in the integrated web server in Siemens SINEMA Remote Connect Server before 1.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2016-6204

Cross-site scripting XSS vulnerability in the integrated web server in Siemens SINEMA Remote Connect Server before 1.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2016-6204

CVE-2016-6204 describes a Cross-Site Scripting (XSS) vulnerability in the integrated web server of Siemens SINEMA Remote Connect Server (all versions before 1.2). The issue allows an attacker to inject script/HTML via a crafted URL, with remote exploitation possible and potential for read-access ...

CVE-2016-6204: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the integrated web server in Siemens SINEMA Remote Connect Server before 1.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

PT-2016-6798

Name of the Vulnerable Software and Affected Versions Siemens SINEMA Remote Connect Server versions prior to 1.2 Description The issue is related to a cross-site scripting XSS vulnerability in the integrated web server. This allows remote attackers to inject arbitrary web script or HTML via a...

Siemens SINEMA Server Privilege Escalation Vulnerability (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-16-215-02 Siemens SINEMA Server Privilege Escalation Vulnerability that was published August 2, 2016, on the NCCIC/ICS-CERT web site. --------- Begin Update A Part 1 of 2 -------- Security researcher rgod working...

Siemens Industrial Products glibc Library Vulnerability (Update C)

OVERVIEW This updated advisory is a follow-up to the advisory update titled ICSA-16-103-01B Siemens Industrial Products glibc Library Vulnerability that was published July 14, 2016, on the NCCIC/ICS-CERT web site. Siemens reports that a buffer overflow vulnerability in the glibc library could...

Siemens Industrial Products glibc Library Vulnerability (Update C)

OVERVIEW This updated advisory is a follow-up to the advisory update titled ICSA-16-103-01B Siemens Industrial Products glibc Library Vulnerability that was published July 14, 2016, on the NCCIC/ICS-CERT web site. Siemens reports that a buffer overflow vulnerability in the glibc library could...

CVE-2014-2731

Multiple unspecified vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to execute arbitrary code via HTTP traffic to port 1 4999 or 2 80...

CVE-2014-2733

Siemens SINEMA Server before 12 SP1 allows remote attackers to cause a denial of service web-interface outage via crafted HTTP requests to port 1 4999 or 2 80...

CVE-2014-2732

Multiple directory traversal vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to access arbitrary files via HTTP traffic to port 1 4999 or 2 80...