EUVD-2011-4441

Malware in sbrugna...

PT-2020-14631

Name of the Vulnerable Software and Affected Versions SIMATIC HMI Basic Panels 2nd Generation incl. SIPLUS variants versions prior to V16 SIMATIC HMI Comfort Panels incl. SIPLUS variants versions prior to V16 SIMATIC HMI Mobile Panels versions prior to V16 SIMATIC HMI Unified Comfort Panels...

Siemens SIMATIC HMI Product Authentication Vulnerability

Siemens SIMATIC HMI panels are HMI software used to operate and monitor machines and equipment. A security vulnerability exists in Siemens SIMATIC HMI products. A remote attacker could use a brute force attack to discover user passwords and gain access to Sm@rt Server...

PT-2020-14632

Name of the Vulnerable Software and Affected Versions SIMATIC HMI Unified Comfort Panels versions prior to V16 Description A security issue has been identified where affected devices do not properly validate authentication attempts. Specifically, the validation process can be tricked by truncatin...

CVE-2020-15786: Improper Restriction of Excessive Authentication Attempts

A vulnerability has been identified in SIMATIC HMI Basic Panels 2nd Generation incl. SIPLUS variants All versions V16, SIMATIC HMI Comfort Panels incl. SIPLUS variants All versions = V16, SIMATIC HMI Mobile Panels All versions = V16, SIMATIC HMI Unified Comfort Panels All versions = V16. Affected...

CVE-2020-15787: Authentication Bypass by Primary Weakness

A vulnerability has been identified in SIMATIC HMI Unified Comfort Panels All versions = V16. Affected devices insufficiently validate authentication attempts as the information given can be truncated to match only a set number of characters versus the whole provided string. This could allow a...

CVE-2011-4515

Siemens WinCC TIA Portal 11 uses a reversible algorithm for storing HMI web-application passwords in world-readable and world-writable files, which allows local users to obtain sensitive information by leveraging 1 physical access or 2 Sm@rt Server access...

Design/Logic Flaw

Siemens WinCC TIA Portal 11 uses a reversible algorithm for storing HMI web-application passwords in world-readable and world-writable files, which allows local users to obtain sensitive information by leveraging 1 physical access or 2 Sm@rt Server access...

CVE-2011-4515

Siemens WinCC TIA Portal 11 uses a reversible algorithm for storing HMI web-application passwords in world-readable and world-writable files, which allows local users to obtain sensitive information by leveraging 1 physical access or 2 Sm@rt Server access...

PT-2013-1459

Name of the Vulnerable Software and Affected Versions Siemens WinCC TIA Portal version 11 Description The issue allows local users to obtain sensitive information by leveraging physical access or Sm@rt Server access, due to the use of a reversible algorithm for storing HMI web-application passwor...