Siemens SIMATIC WinCC Flexible (Runtime) Multiple Vulnerabilities

No description provided by source. Luigi Auriemma Application: Siemens SIMATIC WinCC flexible Runtime http://www.automation.siemens.com/mcms/human-machine-interface/en/visualization-software/wincc-flexible/wincc-flexible-runtime/Pages/Default.aspx Versions: 2008 SP2 + security patch 1 Platforms:...

CVE-2011-4875

Stack-based buffer overflow in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 aka TIA portal; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is enabled,...

CVE-2011-4875

CVE-2011-4875 corresponds to a stack-based buffer overflow in the HmiLoad runtime loader of Siemens WinCC flexible (versions 2004, 2005, 2007, 2008) and WinCC V11 (TIA Portal) including SIMATIC HMI panels and WinCC V11 Runtime Advanced. The root cause is improper handling/validation of Unicode st...

PT-2012-1978

Name of the Vulnerable Software and Affected Versions Siemens WinCC flexible versions 2004 through 2008 WinCC V11 aka TIA portal TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels WinCC V11 Runtime Advanced WinCC flexible Runtime Description The issue is related to a stack-based...

PT-2012-1979

Name of the Vulnerable Software and Affected Versions Siemens WinCC flexible versions 2004 through 2008 Siemens WinCC V11 aka TIA portal Siemens TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels Siemens WinCC V11 Runtime Advanced Siemens WinCC flexible Runtime Description The issue...

CVE-2011-4875: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 aka TIA portal; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is enabled,...

CVE-2011-4877: Improper Input Validation

HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 aka TIA portal; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is enabled, allows remote attackers to cau...

CVE-2011-4876: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 aka TIA portal; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is...

Siemens SIMATIC WinCC flexible multiple security vulnerabilities

HmiLoad and miniweb multiple security vulnerabilities...

Siemens SIMATIC WinCC Flexible (Runtime) - Multiple Vulnerabilities

Siemens SIMATIC WinCC Flexible Runtime - Multiple Vulnerabilities Luigi Auriemma Application: Siemens SIMATIC WinCC flexible Runtime http://www.automation.siemens.com/mcms/human-machine-interface/en/visualization-software/wincc-flexible/wincc-flexible-runtime/Pages/Default.aspx Versions: 2008 SP2...