Design/Logic Flaw

A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier All versions, SIMATIC PCS 7 V8.1 All versions V8.1 with WinCC V7.3 Upd 19, SIMATIC PCS 7 V8.2 All versions V8.2 SP1 with WinCC V7.4 SP1 Upd11, SIMATIC PCS 7 V9.0 All versions V9.0 SP2 with WinCC V7.4 SP1 Upd11, SIMATIC WinCC TI...

CVE-2019-6576: Undefined Security Weakness

A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" All versions V15.1 Update 1, SIMATIC HMI Comfort Outdoor Panels 7" & 15" All versions V15.1 Update 1, SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F All versions V15.1 Update 1, SIMATIC WinCC...

CVE-2019-6572: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" All versions V15.1 Update 1, SIMATIC HMI Comfort Outdoor Panels 7" & 15" All versions V15.1 Update 1, SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F All versions V15.1 Update 1, SIMATIC WinCC...

PT-2019-2108

Name of the Vulnerable Software and Affected Versions SIMATIC HMI Comfort Panels 4" - 22" versions prior to V15.1 Update 1 SIMATIC HMI Comfort Outdoor Panels 7" & 15" versions prior to V15.1 Update 1 SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900, and KTP900F versions prior to V15...

PT-2019-2104

Name of the Vulnerable Software and Affected Versions SIMATIC PCS 7 versions prior to V8.1 with WinCC V7.3 Upd 19 SIMATIC PCS 7 versions prior to V8.2 SP1 with WinCC V7.4 SP1 Upd11 SIMATIC PCS 7 versions prior to V9.0 SP2 with WinCC V7.4 SP1 Upd11 SIMATIC WinCC TIA Portal version V13 SIMATIC WinC...

PT-2019-2103

Name of the Vulnerable Software and Affected Versions SIMATIC PCS 7 versions V8.0 through V8.1 before V8.1 with WinCC V7.3 Upd 19 SIMATIC PCS 7 versions V8.2 through V8.2 before SP1 with WinCC V7.4 SP1 Upd11 SIMATIC PCS 7 versions V9.0 through V9.0 before SP2 with WinCC V7.4 SP1 Upd11 SIMATIC Win...

CVE-2019-6577: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" All versions V15.1 Update 1, SIMATIC HMI Comfort Outdoor Panels 7" & 15" All versions V15.1 Update 1, SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F All versions V15.1 Update 1, SIMATIC WinCC...

CVE-2018-13813

A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" All versions V15 Update 4, SIMATIC HMI Comfort Outdoor Panels 7" & 15" All versions V15 Update 4, SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F All versions V15 Update 4, SIMATIC WinCC Runtime...

CVE-2018-13813: URL Redirection to Untrusted Site

A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" All versions V15 Update 4, SIMATIC HMI Comfort Outdoor Panels 7" & 15" All versions V15 Update 4, SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F All versions V15 Update 4, SIMATIC WinCC Runtime...

PT-2018-12200

Name of the Vulnerable Software and Affected Versions SIMATIC HMI Comfort Panels 4" - 22" versions prior to V14 SIMATIC HMI Comfort Outdoor Panels 7" & 15" versions prior to V14 SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F versions prior to V14 SIMATIC WinCC Runtime...

PT-2018-12198

Name of the Vulnerable Software and Affected Versions SIMATIC HMI Comfort Panels 4" - 22" versions prior to V15 Update 4 SIMATIC HMI Comfort Outdoor Panels 7" & 15" versions prior to V15 Update 4 SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F versions prior to V15 Upda...

CVE-2018-13812: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" All versions V15 Update 4, SIMATIC HMI Comfort Outdoor Panels 7" & 15" All versions V15 Update 4, SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F All versions V15 Update 4, SIMATIC WinCC Runtime...

CVE-2018-11454: Incorrect Default Permissions

A vulnerability has been identified in SIMATIC STEP 7 TIA Portal and WinCC TIA Portal V10, V11, V12 All versions, SIMATIC STEP 7 TIA Portal and WinCC TIA Portal V13 All versions V13 SP2 Update 2, SIMATIC STEP 7 TIA Portal and WinCC TIA Portal V14 All versions V14 SP1 Update 6, SIMATIC STEP 7 TIA...

PT-2018-10583

Name of the Vulnerable Software and Affected Versions SIMATIC STEP 7 TIA Portal and WinCC TIA Portal versions V10 through V12 SIMATIC STEP 7 TIA Portal and WinCC TIA Portal version V13 through V13 SP2 Update 1 SIMATIC STEP 7 TIA Portal and WinCC TIA Portal version V14 through V14 SP1 Update 5...

PT-2018-10582

Name of the Vulnerable Software and Affected Versions SIMATIC STEP 7 TIA Portal and WinCC TIA Portal versions V10 through V12 SIMATIC STEP 7 TIA Portal and WinCC TIA Portal versions V13 through V13 SP1 Update 2 SIMATIC STEP 7 TIA Portal and WinCC TIA Portal versions V14 through V14 SP1 Update 5...

CVE-2018-11453: Incorrect Default Permissions

A vulnerability has been identified in SIMATIC STEP 7 TIA Portal and WinCC TIA Portal V10, V11, V12 All versions, SIMATIC STEP 7 TIA Portal and WinCC TIA Portal V13 All versions V13 SP2 Update 2, SIMATIC STEP 7 TIA Portal and WinCC TIA Portal V14 All versions V14 SP1 Update 6, SIMATIC STEP 7 TIA...

PT-2013-5266

Name of the Vulnerable Software and Affected Versions Siemens WinCC TIA Portal versions 11 through 12 before 12 SP1 Description A cross-site request forgery CSRF issue exists due to improper configuration of SIMATIC HMI panels by the WinCC product, allowing remote attackers to hijack the...

CVE-2013-4911: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Siemens WinCC TIA Portal 11 and 12 before 12 SP1 allows remote attackers to hijack the authentication of unspecified victims by leveraging improper configuration of SIMATIC HMI panels by the WinCC product...

PT-2013-5267

Name of the Vulnerable Software and Affected Versions Siemens WinCC TIA Portal versions 11 and 12 before 12 SP1 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks by leveraging improper configuration of SIMATIC HMI panels. This is d...

CVE-2013-4912: Improper Input Validation

Open redirect vulnerability in Siemens WinCC TIA Portal 11 and 12 before 12 SP1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks by leveraging improper configuration of SIMATIC HMI panels by the WinCC product...