PT-2020-6695 · Siemens · Simocode Es +12

Name of the Vulnerable Software and Affected Versions: Opcenter Execution Discrete versions prior to V3.2 Opcenter Execution Foundation versions prior to V3.2 Opcenter Execution Process versions prior to V3.2 Opcenter Intelligence versions prior to V3.3 Opcenter Quality versions prior to V11.3...

CVE-2020-7585

A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier All versions, SIMATIC PCS 7 V9.0 All versions V9.0 SP3, SIMATIC PDM All versions V9.2, SIMATIC STEP 7 V5.X All versions V5.6 SP2 HF3, SINAMICS STARTER containing STEP 7 OEM version All versions V5.4 HF2. A DLL Hijacking...

Siemens SIMATIC STEP 7 S7HTREEX.OCX control has an out-of-bounds access vulnerability

Siemens SIMATIC STEP 7 TIA Portal is a suite of programming software for SIMATIC controllers from Siemens, Germany. The software provides PLC programming, design option packages and advanced drive technology. An out-of-bounds access vulnerability exists in the S7HTREEX.OCX control of Siemens...

Integer Overflow Vulnerability in the sacommoncontrols.dll Control for Siemens SIMATIC STEP 7

Siemens SIMATIC STEP 7 TIA Portal is a suite of programming software for SIMATIC controllers from Siemens, Germany. The software provides PLC programming, design option packages and advanced drive technology. An integer overflow vulnerability exists in the sacommoncontrols.dll control of Siemens...

The vulnerability of the microprogramming software for Siemens SIMATIC STEP 7 (TIA Portal) relates to the insufficient security of the database storage, allowing an attacker to retrieve passwords.

The vulnerability of the microprogramming software for Siemens SIMATIC STEP 7 TIA Portal is related to the insufficient security of the database where user credentials are stored. Exploiting this vulnerability can allow an attacker to obtain project passwords...

Siemens SIMATIC STEP 7 Information Disclosure Vulnerability

Siemens SIMATIC STEP 7 TIA Portal is a suite of programming software for SIMATIC controllers from Siemens, Germany. The software provides PLC programming, design option packages and advanced drive technology. A security vulnerability exists in Siemens SIMATIC STEP 7 TIA Portal versions prior to...

Siemens SIMATIC STEP 7 and WinCC Denial of Service Vulnerability

Siemens SIMATIC STEP 7 TIA Portal and WinCC TIA Portal are both products of Siemens, Germany.Siemens SIMATIC STEP 7 TIA Portal is a programming software for SIMATIC controllers. The software provides PLC programming, design option packages and advanced drive technology, etc. WinCC TIA Portal is a...

Siemens SIMATIC STEP 7 and WinCC Privilege Management Vulnerability

Siemens SIMATIC STEP 7 TIA Portal and WinCC TIA Portal are both products of Siemens, Germany.Siemens SIMATIC STEP 7 TIA Portal is a programming software for SIMATIC controllers. The software provides PLC programming, design option packages and advanced drive technology, etc. WinCC TIA Portal is a...

CVE-2018-11454

A vulnerability has been identified in SIMATIC STEP 7 TIA Portal and WinCC TIA Portal V10, V11, V12 All versions, SIMATIC STEP 7 TIA Portal and WinCC TIA Portal V13 All versions V13 SP2 Update 2, SIMATIC STEP 7 TIA Portal and WinCC TIA Portal V14 All versions V14 SP1 Update 6, SIMATIC STEP 7 TIA...

CVE-2018-11453

A vulnerability has been identified in SIMATIC STEP 7 TIA Portal and WinCC TIA Portal V10, V11, V12 All versions, SIMATIC STEP 7 TIA Portal and WinCC TIA Portal V13 All versions V13 SP2 Update 2, SIMATIC STEP 7 TIA Portal and WinCC TIA Portal V14 All versions V14 SP1 Update 6, SIMATIC STEP 7 TIA...

The vulnerability of the microprogramming software of Siemens SIMATIC STEP 7 (TIA Portal) arises from the incorrect file management format used for TIA project files during version updates. This allows attackers to access important information regarding configuration settings.

The vulnerability of the microprogramming software used in Siemens SIMATIC STEP 7 TIA Portal is related to the use of an incorrect file management format for TIA project files during version updates. Exploiting this vulnerability can allow a local attacker to access important configuration...

The vulnerability of the microprogramming software of Siemens SIMATIC STEP 7 (TIA Portal) arises from the improper storage of common keys in TIA project files. This allows attackers to gain access to confidential information.

The vulnerability of the microprogramming software of Siemens SIMATIC STEP 7 TIA Portal is related to the improper storage of common keys in TIA project files. Exploiting this vulnerability can allow an intruder, operating locally, to gain access to confidential information...

CVE-2016-7960

Siemens SIMATIC STEP 7 TIA Portal before 14 uses an improper format for managing TIA project files during version updates, which makes it easier for local users to obtain sensitive configuration information via unspecified vectors...

CVE-2016-7959

Siemens SIMATIC STEP 7 TIA Portal before 14 improperly stores pre-shared key data in TIA project files, which makes it easier for local users to obtain sensitive information by leveraging access to a file and conducting a brute-force attack...

Siemens SIMATIC STEP 7 suffers from an information disclosure vulnerability (CNVD-2016-08769)

Siemens SIMATIC is an automation software with a single engineering environment. An information disclosure vulnerability exists in Siemens SIMATIC STEP 7 V12 and V13. A local attacker can exploit the vulnerability to bypass the protection of the TIA Portal Project File Transfer Format and access...

Various Siemens products have search path vulnerabilities

Siemens SIMATIC ProSave; SIMATIC CFC 8 SP4 upd9 8.1 upd1; SIMATIC STEP 7 5.5 SP1 Hf2 5.5 SP2 5.5 SP4 HF4 HF7 sp35.5; SIMOTION Scout 4.4 Starter 4.4 HF3 are all Siemens Siemens Germany company in Germany. A search path vulnerability exists in several Siemens products, allowing local users to gain...

Siemens SIMATIC STEP 7 TIA Portal Man-in-the-Middle Attack Information Disclosure Vulnerability

Siemens SIMATIC is an automation software with a single engineering environment. A man-in-the-middle attack vulnerability exists in Siemens SIMATIC STEP 7 TCP port 102, which could be exploited by an attacker to intercept or modify communications...

Siemens SIMATIC STEP 7 TIA Portal Password Hash Algorithm Security Vulnerability

Siemens SIMATIC is an automation software with a single engineering environment. A security vulnerability exists in Siemens SIMATIC STEP 7 TIA that allows an attacker to exploit the vulnerability to access TIA project files, reconstruct passwords or WEB server passwords...