PT-2014-1220

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC OA versions prior to 3.12 P002 January Description The issue allows remote attackers to cause a denial of service, specifically a monitoring-service outage, via malformed HTTP requests to port 4999. This can be exploited ...

PT-2014-1218

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC OA versions prior to 3.12 P002 January Description The issue is related to the integrated web server in Siemens SIMATIC WinCC OA, which allows remote attackers to execute arbitrary code via crafted packets sent to TCP por...

PT-2014-1217

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC OA versions prior to 3.12 P002 January Description The issue is related to the use of a weak hash algorithm for passwords, making it easier for remote attackers to obtain access via a brute-force attack. This weakness...

Siemens Industrial Products OpenSSL Heartbleed Vulnerability (Update B)

OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-14-105-03A Siemens Industrial Products OpenSSL Heartbleed Vulnerability that was published April 29, 2014, on the NCCIC/ICS-CERT web site. Siemens reported to ICS-CERT a list of products affected by the OpenSSL...

USB Malware Targeting Siemens Control Software (Update C)

Overview VirusBlokAda, an antivirus vendor based in Belarus, announcedVirusBlokAda, http://www.anti-virus.by/en/tempo.shtml, website last visited July 15, 2010. the discovery of malware that uses a zero-day vulnerability in Microsoft Windows processing of shortcut files. The malware utilizes this...

PT-2014-1223

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC versions prior to 7.3 Description The issue allows remote authenticated users to gain privileges via a request to the TCP port 1433. It is related to errors that occur when processing a specially crafted command on the...

PT-2014-14: Privilege Gaining in Siemens SIMATIC WinCC

The specialists of the Positive Research center have detected a Privilege Gaining vulnerability in SIMATIC WinCC. The database server of SIMATIC WinCC could allow authenticated users to escalate their privileges in the database if a specially crafted command is sent to the database server at port...

Siemens WinCC TIA Portal Vulnerabilities

Overview This advisory provides mitigation details for a vulnerability that impacts the Siemens WinCC TIA Totally Integrated Automation Portal HMI. Researchers Billy Rios and Terry McCorkle of Cylance; Gleb Gritsai, Sergey Bobrov, Roman Ilin, Artem Chaykin, Timur Yunusov, and Ilya Karpov from...

Siemens WinCC 7.0 SP3 Multiple Vulnerabilities

Overview This advisory provides mitigation details for vulnerabilities that impact the Siemens SIMATIC WinCC. Positive Technologies and Siemens ProductCERT have identified multiple vulnerabilities in the Siemens SIMATIC WinCC, which is used to configure SIMATIC operator devices. Siemens has...

PT-2013-78: Buffer overflow in SIMATIC WinCC Open Architecture

The specialists of the Positive Research center have detected a Buffer overflow vulnerability in SIMATIC WinCC Open Architecture. The SIMATIC WinCC OA integrated Web server at Port 4999/TCP might allow attackers to perform remote code execution by sending specially crafted packets without...

PT-2013-80: Improper input validation in SIMATIC WinCC Open Architecture

The specialists of the Positive Research center have detected an Improper input validation vulnerability in SIMATIC WinCC Open Architecture. The SIMATIC WinCC OA integrated Web server at Port 4999/TCP might allow attackers to perform a denial of service attack on the SIMATIC WinCC OA monitoring...

PT-2013-79: Relative path traversal in SIMATIC WinCC Open Architecture

The specialists of the Positive Research center have detected a Relative path traversal vulnerability in SIMATIC WinCC Open Architecture. The SIMATIC WinCC OA integrated Web server at Port 4999/TCP might allow attackers to traverse through the server’s file system based on the application’s Windo...

Siemens Simatic SCADA WINCC SQL Insecure Default Credentials Security Bypass (CVE-2010-2772)

A security bypass vulnerability has been reported in Siemens SIMATIC WinCC server. A remote attacker can exploit this issue by using the default hard-coded password to bypass certain security restrictions and gain access to the application's database...

Siemens WinCC Exploitable Crashes

Overview ICS-CERT Advisory ICSA-11-175-02P was originally released to the US-CERT Portal on June 24, 2011. This web page release was delayed to allow users sufficient time to download and install the update. ICS-CERT has received a report from independent security researchers Billy Rios and Terry...

CVE-2013-4911

Cross-site request forgery CSRF vulnerability in Siemens WinCC TIA Portal 11 and 12 before 12 SP1 allows remote attackers to hijack the authentication of unspecified victims by leveraging improper configuration of SIMATIC HMI panels by the WinCC product...

CVE-2013-4912

Open redirect vulnerability in Siemens WinCC TIA Portal 11 and 12 before 12 SP1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks by leveraging improper configuration of SIMATIC HMI panels by the WinCC product...

Open redirect

Open redirect vulnerability in Siemens WinCC TIA Portal 11 and 12 before 12 SP1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks by leveraging improper configuration of SIMATIC HMI panels by the WinCC product...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Siemens WinCC TIA Portal 11 and 12 before 12 SP1 allows remote attackers to hijack the authentication of unspecified victims by leveraging improper configuration of SIMATIC HMI panels by the WinCC product...

CVE-2013-4912

The CVE-2013-4912 issue concerns Siemens WinCC (TIA Portal) Web Server in WinCC V11/V12 (pre-SP1). The vulnerability is an Open Redirect in the Web server, caused by improper configuration of SIMATIC HMI panels, allowing remote attackers to redirect users to arbitrary sites and potentially enable...

CVE-2013-4911

CVE-2013-4911 concerns a Cross-Site Request Forgery (CSRF) vulnerability in Siemens WinCC (TIA Portal). Affected products are WinCC (TIA Portal) V11 and V12 prior to SP1 of V12. The root cause is improper configuration of SIMATIC HMI panels in the WinCC product, enabling an attacker to hijack a v...