Directory traversal

Multiple directory traversal vulnerabilities in Siemens WinCC 7.0 SP3 before Update 2 allow remote authenticated users to read arbitrary files via a crafted parameter in a URL...

Buffer overflow

Buffer overflow in the DiagAgent web server in Siemens WinCC 7.0 SP3 through Update 2 allows remote attackers to cause a denial of service agent outage via crafted input...

Open redirect

Open redirect vulnerability in an unspecified web application in Siemens WinCC 7.0 SP3 before Update 2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in a GET request...

CVE-2012-2595

Multiple cross-site scripting XSS vulnerabilities in unspecified web applications in Siemens WinCC 7.0 SP3 before Update 2 allow remote attackers to inject arbitrary web script or HTML via vectors involving special characters in parameters...

CVE-2012-2596

The XPath functionality in unspecified web applications in Siemens WinCC 7.0 SP3 before Update 2 does not properly handle special characters in parameters, which allows remote authenticated users to read or modify settings via a crafted URL, related to an "XML injection" attack...

CVE-2012-2597

Multiple directory traversal vulnerabilities in Siemens WinCC 7.0 SP3 before Update 2 allow remote authenticated users to read arbitrary files via a crafted parameter in a URL...

CVE-2012-2598

Buffer overflow in the DiagAgent web server in Siemens WinCC 7.0 SP3 through Update 2 allows remote attackers to cause a denial of service agent outage via crafted input...

CVE-2012-3003

Open redirect vulnerability in an unspecified web application in Siemens WinCC 7.0 SP3 before Update 2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in a GET request...

CVE-2012-2595

CVE-2012-2595 covers multiple reflected XSS vulnerabilities in Siemens WinCC 7.0 SP3 web applications prior to Update 2. The root cause is that web applications do not filter out special characters in URL parameters, enabling remote attackers to inject arbitrary script/HTML. The CVE is documented...

CVE-2012-2596

The CVE-2012-2596 vulnerability affects Siemens WinCC 7.0 SP3 web applications, where the XPath/XML injection occurs because URL parameters do not properly filter special characters. This allows remote authenticated users to read or modify settings via a crafted URL. The issue is mitigated by app...

CVE-2012-2597

Siemens WinCC 7.0 SP3 contains a directory traversal flaw (CVE-2012-2597) that allows remote AUTHENTICATED users to read arbitrary files via a crafted URL parameter. Affected: WinCC Web applications on 7.0 SP3 before Update 2. Root cause: improper handling of URL parameters leading to path traver...

CVE-2012-2598

The CVE-2012-2598 issue affects Siemens WinCC 7.0 SP3 (DiagAgent Web server). A buffer overflow in the DiagAgent Web server can be triggered by crafted input, allowing remote attackers to cause a denial of service (agent outage). The vulnerability is remotely exploitable over the network with no ...

CVE-2012-3003

CVE-2012-3003 is an open-redirect vulnerability in Siemens WinCC 7.0 SP3 before Update 2. The issue affects the WinCC web server/web applications and can allow remote attackers to redirect users to arbitrary sites via a URL parameter in a GET request. According to CVSS data, the access vector is ...

PT-2012-4125

Name of the Vulnerable Software and Affected Versions Siemens WinCC version 7.0 SP3 before Update 2 Description The issue allows remote authenticated users to read arbitrary files via a crafted parameter in a URL, due to multiple directory traversal vulnerabilities. Recommendations For Siemens...

PT-2012-4123

Name of the Vulnerable Software and Affected Versions Siemens WinCC version 7.0 SP3 before Update 2 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in unspecified web applications. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML...

PT-2012-4124

Name of the Vulnerable Software and Affected Versions Siemens WinCC version 7.0 SP3 before Update 2 Description The issue concerns the XPath functionality in web applications, which does not properly handle special characters in parameters. This allows remote authenticated users to read or modify...

PT-2012-4126

Name of the Vulnerable Software and Affected Versions Siemens WinCC versions 7.0 SP3 through Update 2 Description The issue is related to a buffer overflow in the DiagAgent web server, which can be exploited by remote attackers to cause a denial of service, resulting in an agent outage. This can ...

PT-2012-4427

Name of the Vulnerable Software and Affected Versions Siemens WinCC version 7.0 SP3 before Update 2 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in a GET request. This can be achieved by including a malicious URL in...

CVE-2012-2597: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Siemens WinCC 7.0 SP3 before Update 2 allow remote authenticated users to read arbitrary files via a crafted parameter in a URL...

CVE-2012-2598: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the DiagAgent web server in Siemens WinCC 7.0 SP3 through Update 2 allows remote attackers to cause a denial of service agent outage via crafted input...