CVE-2012-3032

SQL injection vulnerability in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to execute arbitrary SQL commands via a crafted SOAP message...

CVE-2012-3032

CVE-2012-3032 describes a SQL Injection vulnerability in the WebNavigator component of Siemens WinCC (7.0 SP3 and earlier) where a crafted SOAP message can cause arbitrary SQL commands to be executed. The affected product is Siemens WinCC WebNavigator; the root cause is improper neutralization of...