CVE-2015-5084: Exposure of Sensitive Information to an Unauthorized Actor

The Siemens SIMATIC WinCC Sm@rtClient and Sm@rtClient Lite applications before 01.00.01.00 for Android do not properly store passwords, which allows physically proximate attackers to obtain sensitive information via unspecified vectors...

PT-2015-6772

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC Sm@rtClient and Sm@rtClient Lite versions prior to 01.00.01.00 Description The issue concerns the improper storage of passwords, allowing physically proximate attackers to obtain sensitive information. Recommendations For...

Siemens multiple products there is a security problem, the part of the patch has been released-vulnerability warning-the black bar safety net

Siemens recently released software and firmware security update, saying the company multiple products there are security issues, users are advised to update ASAP. ICS-CERT and Siemens announcement that the SIPROTEC 4 and SIPROTEC Compact devices recently have been affected by the vulnerability...

Siemens SIMATIC WinCC Sm@rtClient for Android Password Information Disclosure Vulnerability

Siemens SIMATIC WinCC Sm@rtClient for Android is a client program on Android systems.Siemens SIMATIC is an automation software with a single engineering environment. A security vulnerability exists in the Siemens SIMATIC WinCC Sm@rtClient for Android storage that allows local users to access...

Siemens SIMATIC WinCC (TIA Portal) 13.x < 13 SP1 Upd2 Multiple Vulnerabilities (SSA-487246)

Binary data scadasiemenstiawinccSSA-487246.nbin...

Siemens SIMATIC and SIMATIC WinCC HMI Comfort Panels Authentication Bypass Vulnerability

Siemens SIMATIC WinCC is a complete Supervisory Control and Data Acquisition SCADA solution for industry, ranging from single-user systems to multi-user systems supporting redundant servers and remote Web client solutions. An authentication bypass vulnerability exists in Siemens SIMATIC and SIMAT...

CVE-2015-2823

Siemens SIMATIC HMI Basic Panels 2nd Generation before WinCC TIA Portal 13 SP1 Upd2, SIMATIC HMI Comfort Panels before WinCC TIA Portal 13 SP1 Upd2, SIMATIC WinCC Runtime Advanced before WinCC TIA Portal 13 SP1 Upd2, SIMATIC WinCC Runtime Professional before WinCC TIA Portal 13 SP1 Upd2, SIMATIC...

Code injection

Siemens SIMATIC HMI Comfort Panels before WinCC TIA Portal 13 SP1 Upd2 and SIMATIC WinCC Runtime Advanced before WinCC TIA Portal 13 SP1 Upd2 allow man-in-the-middle attackers to cause a denial of service via crafted packets on TCP port 102...

CVE-2015-2823

CVE-2015-2823 affects Siemens SIMATIC HMI/WinCC products (HMI Basic Panels 2nd Gen and others) where an attacker can authenticate remotely by using a password hash instead of the password. The issue is a password-hash authentication weakness that can enable unauthorized access to multiple SAP/Win...

PT-2015-5915

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC HMI Comfort Panels versions prior to WinCC TIA Portal 13 SP1 Upd2 Siemens SIMATIC WinCC Runtime Advanced versions prior to WinCC TIA Portal 13 SP1 Upd2 Description The issue allows man-in-the-middle attackers to cause a denial ...

CVE-2015-2823: Improper Authentication

Siemens SIMATIC HMI Basic Panels 2nd Generation before WinCC TIA Portal 13 SP1 Upd2, SIMATIC HMI Comfort Panels before WinCC TIA Portal 13 SP1 Upd2, SIMATIC WinCC Runtime Advanced before WinCC TIA Portal 13 SP1 Upd2, SIMATIC WinCC Runtime Professional before WinCC TIA Portal 13 SP1 Upd2, SIMATIC...

PT-2015-1807

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC HMI Basic Panels 2nd Generation versions prior to WinCC TIA Portal 13 SP1 Upd2 Siemens SIMATIC HMI Comfort Panels versions prior to WinCC TIA Portal 13 SP1 Upd2 Siemens SIMATIC WinCC Runtime Advanced versions prior to WinCC TIA...

CVE-2015-2822: Improper Input Validation

Siemens SIMATIC HMI Comfort Panels before WinCC TIA Portal 13 SP1 Upd2 and SIMATIC WinCC Runtime Advanced before WinCC TIA Portal 13 SP1 Upd2 allow man-in-the-middle attackers to cause a denial of service via crafted packets on TCP port 102...

Siemens SIMATIC WinCC (TIA Portal) Detection

Binary data scadaappsiemenstiawinccdetect.nbin...

Siemens SIMATIC WinCC (TIA Portal) 13 < 13 SP1 Multiple Vulnerabilities (SSA-543623)

Binary data scadasiemenstiawinccmultiplevulnerabilitiesSSA-543623.nbin...

Siemens SIMATIC WinCC TIA Portal Man-in-the-Middle Information Disclosure Vulnerability

Siemens SIMATIC WinCC is the monitoring control and data acquisition SCADA and HMI system. An information disclosure vulnerability exists in Siemens SIMATIC WinCC V13 SP1, which can be exploited by an attacker to obtain sensitive information via a man-in-the-middle attack...

CVE-2015-1358

The remote-management module in the 1 Multi Panels, 2 Comfort Panels, and 3 RT Advanced functionality in Siemens SIMATIC WinCC TIA Portal before 13 SP1 and in the 4 panels and 5 runtime functionality in SIMATIC WinCC flexible before 2008 SP3 Up7 does not properly encrypt credentials in transit,...

Code injection

The remote-management module in the 1 Multi Panels, 2 Comfort Panels, and 3 RT Advanced functionality in Siemens SIMATIC WinCC TIA Portal before 13 SP1 and in the 4 panels and 5 runtime functionality in SIMATIC WinCC flexible before 2008 SP3 Up7 does not properly encrypt credentials in transit,...

CVE-2015-1358

The remote-management module in the 1 Multi Panels, 2 Comfort Panels, and 3 RT Advanced functionality in Siemens SIMATIC WinCC TIA Portal before 13 SP1 and in the 4 panels and 5 runtime functionality in SIMATIC WinCC flexible before 2008 SP3 Up7 does not properly encrypt credentials in transit,...

CVE-2015-1358

Siemens SIMATIC WinCC (TIA Portal) CVE-2015-1358: The remote-management modules in WinCC (TIA Portal) Multi Panels, Comfort Panels and RT Advanced, and in WinCC Flexible panels/runtime before the stated SPs, transmit credentials in weak or unencrypted form. This allows network-sniffing attackers ...