PT-2014-4889

Name of the Vulnerable Software and Affected Versions Siemens SINEMA Server versions prior to 12 SP1 Description The issue concerns multiple directory traversal vulnerabilities in the integrated web server. Remote attackers can access arbitrary files via HTTP traffic to port 4999 or 80...

CVE-2014-2248: Undefined Security Weakness

Open redirect vulnerability in the integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2014-2246: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2014-4582

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC S7-1500 CPU PLC devices versions prior to 1.5.0 Description A cross-site scripting XSS issue exists in the integrated web server, allowing remote attackers to inject arbitrary web script or HTML. This could potentially lead to...

PT-2014-4584

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC S7-1500 CPU PLC devices versions prior to 1.5.0 Description The issue concerns an open redirect vulnerability in the integrated web server. This vulnerability allows remote attackers to redirect users to arbitrary web sites,...

PT-2014-1218

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC OA versions prior to 3.12 P002 January Description The issue is related to the integrated web server in Siemens SIMATIC WinCC OA, which allows remote attackers to execute arbitrary code via crafted packets sent to TCP por...