CVE-2011-4513: Undefined Security Weakness

Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 aka TIA portal; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allow user-assisted remote attackers to execute arbitrary code via a crafted project file,...

CVE-2011-4510: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 aka TIA portal before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime...

CVE-2011-4514: Improper Authentication

The TELNET daemon in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 aka TIA portal; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime does not perform authentication, which makes it easier for remote attacker...

CVE-2011-4509: Undefined Security Weakness

The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 aka TIA portal; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime has an improperly selected default password for the administrator account...

CVE-2011-4876: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 aka TIA portal; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is...

CVE-2011-4879: Improper Input Validation

miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 aka TIA portal before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime does not properly handle UR...

KLA10394 Multiple vulnerabilities in Siemens

Multiple critical vulnerabilities have been found in Siemens products. Malicious users can exploit these vulnerabilities to read & modify arbitrary files, cause denial of service, execute arbitrary code, bypass authentication, obtain access and inject arbitrary HTTP headers. Below is a complete...

Multiple Siemens SIMATIC Products Authentication Bypass Vulnerabilities

Multiple Siemens SIMATIC products are affected by vulnerabilities that allow attackers to bypass authentication. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Siemens SIMATIC WinCC flexible multiple security vulnerabilities

HmiLoad and miniweb multiple security vulnerabilities...

Vulnerabilities in Siemens SIMATIC WinCC flexible 2008 SP2

Luigi Auriemma Application: Siemens SIMATIC WinCC flexible Runtime http://www.automation.siemens.com/mcms/human-machine-interface/en/visualization-software/wincc-flexible/wincc-flexible-runtime/Pages/Default.aspx Versions: 2008 SP2 + security patch 1 Platforms: Windows Bugs: A HmiLoad strings sta...

Siemens SIMATIC WinCC Flexible (Runtime) - Multiple Vulnerabilities

Siemens SIMATIC WinCC Flexible Runtime - Multiple Vulnerabilities Luigi Auriemma Application: Siemens SIMATIC WinCC flexible Runtime http://www.automation.siemens.com/mcms/human-machine-interface/en/visualization-software/wincc-flexible/wincc-flexible-runtime/Pages/Default.aspx Versions: 2008 SP2...

Siemens SIMATIC WinCC Flexible (Runtime) - Multiple Vulnerabilities

Luigi Auriemma Application: Siemens SIMATIC WinCC flexible Runtime http://www.automation.siemens.com/mcms/human-machine-interface/en/visualization-software/wincc-flexible/wincc-flexible-runtime/Pages/Default.aspx Versions: 2008 SP2 + security patch 1 Platforms: Windows Bugs: A HmiLoad strings sta...

Was The Three Character Password Used To Hack South Houston's Water Treatment Plant A Siemens Default?

Siemens said on Tuesday that it is working with the U.S. Department of Homeland Security to investigate a cyber intrusion into a water treatment plant in South Houston, Texas, but couldn’t confirm that a default, three digit password hard coded into an application used to control the company’s...

CVE-2011-3321

Heap-based buffer overflow in the Siemens WinCC Runtime Advanced Loader, as used in SIMATIC WinCC flexible Runtime and SIMATIC WinCC TIA Portal Runtime Advanced, allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted packet to TCP...

Heap overflow

Heap-based buffer overflow in the Siemens WinCC Runtime Advanced Loader, as used in SIMATIC WinCC flexible Runtime and SIMATIC WinCC TIA Portal Runtime Advanced, allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted packet to TCP...

CVE-2011-3321

CVE-2011-3321 affects Siemens WinCC flexible Runtime and SIMATIC WinCC (TIA Portal) Runtime Advanced Loader. The issue is a heap-based buffer overflow in the loader’s handling of inputs on 2308/TCP, enabling remote attackers to cause memory corruption and potentially execute arbitrary code or cau...

CVE-2011-3321

Heap-based buffer overflow in the Siemens WinCC Runtime Advanced Loader, as used in SIMATIC WinCC flexible Runtime and SIMATIC WinCC TIA Portal Runtime Advanced, allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted packet to TCP...

PT-2011-4389

Name of the Vulnerable Software and Affected Versions Siemens WinCC Runtime Advanced Loader affected versions not specified SIMATIC WinCC flexible Runtime affected versions not specified SIMATIC WinCC TIA Portal Runtime Advanced affected versions not specified Description The issue is related to ...

CVE-2011-3321: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the Siemens WinCC Runtime Advanced Loader, as used in SIMATIC WinCC flexible Runtime and SIMATIC WinCC TIA Portal Runtime Advanced, allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted packet to TCP...

Many Stuxnet Vulnerabilities Still Unpatched

The media storm over the Stuxnet worm may have passed, but many of the software holes that were used by the worm remain unpatched and leave Siemens customers open to a wide range of potentially damaging cyber attacks, according to industrial control system expert Ralph Langner. Writing on his...