Siemens SIMATIC S7-400 Input Validation Vulnerability

Siemens SIMATIC S7-400 is a programmable logic controller for manufacturing and process automation from Siemens, Germany. An input validation vulnerability exists in the Siemens SIMATIC S7-400 product, which can be exploited by an attacker to cause a service crash via a specially crafted packet...

PT-2018-2566 · Siemens · Simatic S7-400 Cpu 416-2 Dp V7 +14

Name of the Vulnerable Software and Affected Versions: SIMATIC S7-400 CPU 412-1 DP V7 All versions SIMATIC S7-400 CPU 412-2 DP V7 All versions SIMATIC S7-400 CPU 412-2 PN V7 All versions V7.0.3 SIMATIC S7-400 CPU 414-2 DP V7 All versions SIMATIC S7-400 CPU 414-3 DP V7 All versions SIMATIC S7-400...

The vulnerability of the PROFIBUS-Ethernet gateway Softing AG FG-100 PB lies in the use of pre-set credentials, allowing a intruder to gain access to the device with root privileges.

The vulnerability of the PROFIBUS-Ethernet gateway Softing AG FG-100 PB lies in the use of pre-set credentials. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the device with root privileges through a Telnet connection...

Hardcoded credentials

Softing FG-100 PB PROFIBUS firmware version FG-x00-PBV2.02.0.00 contains a hardcoded password for the root account, which allows remote attackers to obtain administrative access via a TELNET session...

CVE-2014-6617

Softing FG-100 PB PROFIBUS firmware version FG-x00-PBV2.02.0.00 contains a hardcoded password for the root account, which allows remote attackers to obtain administrative access via a TELNET session...

CVE-2014-6617

The CVE-2014-6617 entry applies to Softing FG-100 PB PROFIBUS firmware FG-x00-PB_V2.02.0.00, where a hardcoded root password enables TELNET access to obtain admin rights. Public documents (NVD entry and Compass Security advisory) confirm a backdoor account exists by default, with vendor notes ind...

CVE-2014-6617

Softing FG-100 PB PROFIBUS firmware version FG-x00-PBV2.02.0.00 contains a hardcoded password for the root account, which allows remote attackers to obtain administrative access via a TELNET session...

Siemens SIMATIC S7 PLC Multiple Vulnerabilities (SSA-293562)

Siemens SIMATIC S7 devices are prone to multiple vulnerabilities. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

CVE-2017-2681

Specially crafted PROFINET DCP packets sent on a local Ethernet segment Layer 2 to an affected product could cause a denial of service condition of that product. Human interaction is required to recover the system. PROFIBUS interfaces are not affected...

CVE-2017-2681

Specially crafted PROFINET DCP packets sent on a local Ethernet segment Layer 2 to an affected product could cause a denial of service condition of that product. Human interaction is required to recover the system. PROFIBUS interfaces are not affected...

CVE-2017-2680

Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment Layer 2. Human interaction is required to recover the systems. PROFIBUS interfaces are not affected...

Design/Logic Flaw

Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment Layer 2. Human interaction is required to recover the systems. PROFIBUS interfaces are not affected...

PT-2017-3762 · Siemens · Profinet Dcp

Name of the Vulnerable Software and Affected Versions: Siemens PROFINET DCP affected versions not specified Description: The issue is related to insufficient input validation in the PROFINET DCP software, which can be exploited by an attacker using specially crafted PROFINET DCP broadcast packets...

Design/Logic Flaw

A vulnerability has been identified in SIMATIC S7-300 CPU family All versions, SIMATIC S7-300 CPU family incl. related ET200 CPUs and SIPLUS variants All versions, SIMATIC S7-400 PN/DP V6 and below CPU family incl. SIPLUS variants All versions, SIMATIC S7-400 PN/DP V7 CPU family incl. SIPLUS...

CVE-2016-9159

A vulnerability has been identified in SIMATIC S7-300 CPU family All versions, SIMATIC S7-300 CPU family incl. related ET200 CPUs and SIPLUS variants All versions, SIMATIC S7-400 PN/DP V6 and below CPU family incl. SIPLUS variants All versions, SIMATIC S7-400 PN/DP V7 CPU family incl. SIPLUS...

CVE-2016-9159

A vulnerability has been identified in SIMATIC S7-300 CPU family All versions, SIMATIC S7-300 CPU family incl. related ET200 CPUs and SIPLUS variants All versions, SIMATIC S7-400 PN/DP V6 and below CPU family incl. SIPLUS variants All versions, SIMATIC S7-400 PN/DP V7 CPU family incl. SIPLUS...

CVE-2016-9159

The vulnerability CVE-2016-9159 affects Siemens SIMATIC S7-300/400 PLC families (including related ET200/SIPLUS variants) where an attacker with network access to port 102/TCP (ISO-TSAP) or via Profibus can obtain credentials if protection-level 2 is configured. The ICS-CISA advisory SSA-731239 d...

CVE-2016-9159

A vulnerability has been identified in SIMATIC S7-300 CPU family All versions, SIMATIC S7-300 CPU family incl. related ET200 CPUs and SIPLUS variants All versions, SIMATIC S7-400 PN/DP V6 and below CPU family incl. SIPLUS variants All versions, SIMATIC S7-400 PN/DP V7 CPU family incl. SIPLUS...

CVE-2016-3949

Siemens SIMATIC S7-300 Profinet-enabled CPU devices with firmware before 3.2.12 and SIMATIC S7-300 Profinet-disabled CPU devices with firmware before 3.3.12 allow remote attackers to cause a denial of service defect-mode transition via crafted 1 ISO-TSAP or 2 Profibus packets...

CVE-2016-3949

Siemens SIMATIC S7-300 Profinet-enabled CPU devices with firmware before 3.2.12 and SIMATIC S7-300 Profinet-disabled CPU devices with firmware before 3.3.12 allow remote attackers to cause a denial of service defect-mode transition via crafted 1 ISO-TSAP or 2 Profibus packets...