CVE-2014-4686

Siemens SIMATIC WinCC (before 7.3) contains a hard-coded encryption key in the Project administration component, enabling remote attackers to extract the key from another installation and use it to sniff traffic on TCP port 1030. This can lead to credential exposure and elevated privileges. Publi...

CVE-2014-4686: Undefined Security Weakness

The Project administration application in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, has a hardcoded encryption key, which allows remote attackers to obtain sensitive information by extracting this key from another product installation and then employing this key during...

CVE-2014-4684: Undefined Security Weakness

The database server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a request to TCP port 1433...

CVE-2014-4685: Undefined Security Weakness

Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows local users to gain privileges by leveraging weak system-object access control...

CVE-2013-3957

SQL injection vulnerability in the login screen in the Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and earlier and other products, allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-3958

The login implementation in the Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and earlier and other products, has a hardcoded account, which makes it easier for remote attackers to obtain access via an unspecified request...

Code injection

The Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and earlier and other products, exhibits different behavior for NetBIOS user names depending on whether the user account exists, which allows remote authenticated users to enumerate account names via crafted U...

CVE-2013-3957

SQL injection vulnerability in the login screen in the Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and earlier and other products, allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-3957

CVE-2013-3957 describes an SQL injection vulnerability in the Web Navigator login screen of Siemens WinCC prior to version 7.2 Update 1 (used in SIMATIC PCS7 8.0 SP1 and earlier). The issue arises from input handling in the login/UI that can be manipulated to inject SQL statements through unspeci...

CVE-2013-3957: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the login screen in the Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and earlier and other products, allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-3958: Undefined Security Weakness

The login implementation in the Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and earlier and other products, has a hardcoded account, which makes it easier for remote attackers to obtain access via an unspecified request...

CVE-2013-3959: Exposure of Sensitive Information to an Unauthorized Actor

The Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and earlier and other products, exhibits different behavior for NetBIOS user names depending on whether the user account exists, which allows remote authenticated users to enumerate account names via crafted U...

CVE-2013-0677

The web server in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote attackers to obtain sensitive information or cause a denial of service via a crafted project file...

CVE-2013-0678

Siemens WinCC (before 7.2, used in SIMATIC PCS7 before 8.0 SP1) stores WebNavigator passwords in an MS SQL database without proper protection, enabling remote authenticated users with DB access to read credentials and obtain sensitive information. The root cause is information disclosure due to m...

PT-2013-2521

Name of the Vulnerable Software and Affected Versions Siemens WinCC versions prior to 7.2 SIMATIC PCS7 versions prior to 8.0 SP1 Description The issue allows remote authenticated users to obtain sensitive information via a SQL query due to improper assignment of privileges for the database...

PT-2013-2519

Name of the Vulnerable Software and Affected Versions Siemens WinCC versions prior to 7.2 SIMATIC PCS7 versions prior to 8.0 SP1 Description The issue is related to a buffer overflow in the RegReader ActiveX control. This allows remote attackers to execute arbitrary code via a long parameter...

PT-2013-2522

Name of the Vulnerable Software and Affected Versions Siemens WinCC versions prior to 7.2 SIMATIC PCS7 versions prior to 8.0 SP1 Description The issue allows remote attackers to obtain sensitive information or cause a denial of service by using a crafted project file. Recommendations For Siemens...

PT-2013-2523

Name of the Vulnerable Software and Affected Versions Siemens WinCC versions prior to 7.2 SIMATIC PCS7 versions prior to 8.0 SP1 Description The issue is related to the improper representation of WebNavigator credentials in a database. This makes it easier for remote authenticated users to obtain...

PT-2013-2524

Name of the Vulnerable Software and Affected Versions Siemens WinCC versions prior to 7.2 SIMATIC PCS7 versions prior to 8.0 SP1 Description A directory traversal issue in the web server allows remote authenticated users to read arbitrary files by querying a pathname. Recommendations For Siemens...

CVE-2013-0678: Undefined Security Weakness

Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, does not properly represent WebNavigator credentials in a database, which makes it easier for remote authenticated users to obtain sensitive information via a SQL query...