1056 matches found
CVE-2019-10918
Siemens CVE-2019-10918 affects multiple SIMATIC/WinCC products (e.g., WinCC/TIA Portal v14 with SP1 Upd 9 and v15 with Upd 3; WinCC Runtime Professional v14/v15; PCS7 with WinCC updaters). Root cause is an exposed DCOM interface that could let an authenticated, network-reachable attacker execute ...
CVE-2019-10917
CVE-2019-10917 is a local-denial-of-service vulnerability affecting Siemens SIMATIC PCS7/WinCC product families (e.g., WinCC (TIA Portal) v13–v15 and WinCC Runtime Professional; PCS7 v8.0–9.0 with WinCC variants). The issue arises when a local attacker loads a project file, triggering a DoS and c...
CVE-2019-10916
A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier All versions, SIMATIC PCS 7 V8.1 All versions V8.1 with WinCC V7.3 Upd 19, SIMATIC PCS 7 V8.2 All versions V8.2 SP1 with WinCC V7.4 SP1 Upd11, SIMATIC PCS 7 V9.0 All versions V9.0 SP2 with WinCC V7.4 SP1 Upd11, SIMATIC WinCC TI...
CVE-2019-10922
This CVE (CVE-2019-10922) affects Siemens SIMATIC WinCC and PCS 7: PCS 7 v8.0 and earlier, PCS 7 v8.1 and newer if Encrypted Communications is disabled; WinCC v7.2 and earlier, WinCC v7.3 and newer if Encrypted Communications is disabled. Vulnerability type: Missing Authentication for Critical Fu...
CVE-2019-10916
CVE-2019-10916 affects Siemens SIMATIC PCS7 and WinCC/TIA Portal products (multiple versions). The root cause is SQL Injection in the project file handling, allowing an attacker who can access the project file to run arbitrary commands with the local database server’s privileges, impacting confid...
CVE-2019-10917
A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier All versions, SIMATIC PCS 7 V8.1 All versions V8.1 with WinCC V7.3 Upd 19, SIMATIC PCS 7 V8.2 All versions V8.2 SP1 with WinCC V7.4 SP1 Upd11, SIMATIC PCS 7 V9.0 All versions V9.0 SP2 with WinCC V7.4 SP1 Upd11, SIMATIC WinCC TI...
PT-2019-2105
Name of the Vulnerable Software and Affected Versions SIMATIC PCS 7 versions 8.0 and earlier SIMATIC PCS 7 versions 8.1 and newer SIMATIC WinCC versions 7.2 and earlier SIMATIC WinCC versions 7.3 and newer Description A security issue has been identified that allows an attacker with network acces...
CVE-2019-10916: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier All versions, SIMATIC PCS 7 V8.1 All versions V8.1 with WinCC V7.3 Upd 19, SIMATIC PCS 7 V8.2 All versions V8.2 SP1 with WinCC V7.4 SP1 Upd11, SIMATIC PCS 7 V9.0 All versions V9.0 SP2 with WinCC V7.4 SP1 Upd11, SIMATIC WinCC TI...
CVE-2019-10918: Exposed Dangerous Method or Function
A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier All versions, SIMATIC PCS 7 V8.1 All versions V8.1 with WinCC V7.3 Upd 19, SIMATIC PCS 7 V8.2 All versions V8.2 SP1 with WinCC V7.4 SP1 Upd11, SIMATIC PCS 7 V9.0 All versions V9.0 SP2 with WinCC V7.4 SP1 Upd11, SIMATIC WinCC TI...
PT-2019-2104
Name of the Vulnerable Software and Affected Versions SIMATIC PCS 7 versions prior to V8.1 with WinCC V7.3 Upd 19 SIMATIC PCS 7 versions prior to V8.2 SP1 with WinCC V7.4 SP1 Upd11 SIMATIC PCS 7 versions prior to V9.0 SP2 with WinCC V7.4 SP1 Upd11 SIMATIC WinCC TIA Portal version V13 SIMATIC WinC...
CVE-2019-6576: Undefined Security Weakness
A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" All versions V15.1 Update 1, SIMATIC HMI Comfort Outdoor Panels 7" & 15" All versions V15.1 Update 1, SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F All versions V15.1 Update 1, SIMATIC WinCC...
CVE-2019-6577: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" All versions V15.1 Update 1, SIMATIC HMI Comfort Outdoor Panels 7" & 15" All versions V15.1 Update 1, SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F All versions V15.1 Update 1, SIMATIC WinCC...
CVE-2019-10922: Missing Authentication for Critical Function
A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier All versions, SIMATIC PCS 7 V8.1 and newer All versions, SIMATIC WinCC V7.2 and earlier All versions, SIMATIC WinCC V7.3 and newer All versions. An attacker with network access to affected installations, which are configured...
PT-2019-2102
Name of the Vulnerable Software and Affected Versions SIMATIC PCS 7 versions V8.0 and earlier SIMATIC PCS 7 V8.1 versions prior to V8.1 with WinCC V7.3 Upd 19 SIMATIC PCS 7 V8.2 versions prior to V8.2 SP1 with WinCC V7.4 SP1 Upd11 SIMATIC PCS 7 V9.0 versions prior to V9.0 SP2 with WinCC V7.4 SP1...
PT-2019-2103
Name of the Vulnerable Software and Affected Versions SIMATIC PCS 7 versions V8.0 through V8.1 before V8.1 with WinCC V7.3 Upd 19 SIMATIC PCS 7 versions V8.2 through V8.2 before SP1 with WinCC V7.4 SP1 Upd11 SIMATIC PCS 7 versions V9.0 through V9.0 before SP2 with WinCC V7.4 SP1 Upd11 SIMATIC Win...
CVE-2019-10917: Uncaught Exception
A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier All versions, SIMATIC PCS 7 V8.1 All versions V8.1 with WinCC V7.3 Upd 19, SIMATIC PCS 7 V8.2 All versions V8.2 SP1 with WinCC V7.4 SP1 Upd11, SIMATIC PCS 7 V9.0 All versions V9.0 SP2 with WinCC V7.4 SP1 Upd11, SIMATIC WinCC TI...
CVE-2019-6572: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" All versions V15.1 Update 1, SIMATIC HMI Comfort Outdoor Panels 7" & 15" All versions V15.1 Update 1, SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F All versions V15.1 Update 1, SIMATIC WinCC...
ICSA-19-134-02 Siemens SIMATIC WinCC and SIMATIC PCS 7
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SIMATIC WinCC and SIMATIC PCS 7 Vulnerability: Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an...
Siemens SIMATIC WinCC and SIMATIC PCS 7
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SIMATIC WinCC and SIMATIC PCS 7 Vulnerability: Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an...
Cross-site scripting vulnerability in multiple Siemens products
Siemens SIMATIC WinCC is an automated data acquisition and monitoring SCADA system, Siemens SIMATIC HMI Comfort Panels is a touch panel device, Siemens SIMATIC HMI Comfort Outdoor Panels is a touch panel device for outdoor use, and Siemens SIMATIC HMI Comfort Outdoor Panels is a touch panel devic...