CVE-2018-16557

The CVE-2018-16557 entry applies to Siemens SIMATIC S7-400 family CPUs (e.g., 412-1/2 DP V7, 414-2/3 DP V7, 416-2/3 DP V7, 417-4 DP V7, PN/DP variants, H variants) and related SIPLUS/S7-400 CPU families. The vulnerability allows denial of service by sending specially crafted packets to TCP port 1...

CVE-2018-16557

A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 All versions, SIMATIC S7-400 CPU 412-2 DP V7 All versions, SIMATIC S7-400 CPU 414-2 DP V7 All versions, SIMATIC S7-400 CPU 414-3 DP V7 All versions, SIMATIC S7-400 CPU 414-3 PN/DP V7 All versions V7.0.3, SIMATIC S7-400 CPU 414F...

CVE-2018-13815

Siemens SIMATIC S7-1200 (all versions) and S7-1500 (all versions

CVE-2018-16556

CVE-2018-16556 affects Siemens SIMATIC S7-400 family CPUs (multiple models). Root cause: specially crafted packets sent to port 102/tcp (Ethernet, PROFIBUS, MPI) can cause devices to enter defect mode, requiring a manual reboot. Exploitation requires network access with no user interaction; impac...

Siemens SIMATIC S7-1200 and SIMATIC S7-1500 Denial of Service Vulnerability

The Siemens SIMATIC S7-1200 and SIMATIC S7-1500 are programmable logic controllers PLCs for small and medium-sized automation systems from Siemens, Germany. A denial of service vulnerability exists in the Siemens SIMATIC S7-1200 all versions and SIMATIC S7-1500 prior to version 2.6, which can be...

Siemens SIMATIC S7-400 Input Validation Vulnerability

Siemens SIMATIC S7-400 is a programmable logic controller for manufacturing and process automation from Siemens, Germany. An input validation vulnerability exists in the Siemens SIMATIC S7-400. An attacker can exploit this vulnerability by sending specially crafted packets to TCP port 102 to caus...

Siemens S7-400 CPUs (Update B)

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens SIMATIC S7 (Update A)

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SIMATIC S7 Vulnerability: Resource Exhaustion 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-18-317-05 Siemens SIMATIC S7 that...

PT-2018-2566 · Siemens · Simatic S7-400 Cpu 416-2 Dp V7 +14

Name of the Vulnerable Software and Affected Versions: SIMATIC S7-400 CPU 412-1 DP V7 All versions SIMATIC S7-400 CPU 412-2 DP V7 All versions SIMATIC S7-400 CPU 412-2 PN V7 All versions V7.0.3 SIMATIC S7-400 CPU 414-2 DP V7 All versions SIMATIC S7-400 CPU 414-3 DP V7 All versions SIMATIC S7-400...

CVE-2018-13800

A vulnerability has been identified in SIMATIC S7-1200 CPU family version 4 All versions V4.2.3. The web interface could allow a Cross-Site Request Forgery CSRF attack if an unsuspecting user is tricked into accessing a malicious link. Successful exploitation requires user interaction by a...

CVE-2018-13800

A vulnerability has been identified in SIMATIC S7-1200 CPU family version 4 All versions V4.2.3. The web interface could allow a Cross-Site Request Forgery CSRF attack if an unsuspecting user is tricked into accessing a malicious link. Successful exploitation requires user interaction by a...

Cross site request forgery (csrf)

A vulnerability has been identified in SIMATIC S7-1200 CPU family version 4 All versions V4.2.3. The web interface could allow a Cross-Site Request Forgery CSRF attack if an unsuspecting user is tricked into accessing a malicious link. Successful exploitation requires user interaction by a...

CVE-2018-13800

A vulnerability has been identified in SIMATIC S7-1200 CPU family version 4 All versions V4.2.3. The web interface could allow a Cross-Site Request Forgery CSRF attack if an unsuspecting user is tricked into accessing a malicious link. Successful exploitation requires user interaction by a...

CVE-2018-13800

Siemens SIMATIC S7-1200 CPU Family Version 4 (all versions before 4.2.3) is affected by a Cross-Site Request Forgery (CSRF) vulnerability in the web interface. Exploitation requires a legitimate, authenticated user to click a malicious link, enabling an attacker to trigger actions within the auth...

CVE-2018-13805

A vulnerability has been identified in SIMATIC ET 200SP Open Controller All versions = V2.0 and = V2.0 and = V2.0 and V2.5. An attacker can cause a denial-of-service condition on the network stack by sending a large number of specially crafted packets to the PLC. The PLC will lose its ability to...

Siemens SIMATIC S7-1500, SIMATIC S7-1500 Software Controller and SIMATIC ET 200SP OpenController (Update A)

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SIMATIC S7-1500, SIMATIC S7-1500 Software Controller and SIMATIC ET 200SP Open Controller Vulnerability: Improper Input Validation 2. UPDATE INFORMATION This updated advisory is...

Siemens SIMATIC S7-1200 CPU Family Version 4

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely Vendor: Siemens Equipment: SIMATIC S7-1200 CPU Family Version 4 Vulnerability: Cross-Site Request Forgery CSRF 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a CSRF attack if an unsuspecting user is...

Siemens SIMATIC PLCs Reported Issues Summary (Update A)

Overview ICS-CERT has been coordinating multiple reports of issues affecting various models within the Siemens SIMATIC Step 7 S7 programmable logic controller PLC product line. ICS-CERT has coordinated the issues with both Siemens and the researcher and continues to work with both entities. A...

luxury-s7.fr XSS vulnerability

Open Bug Bounty ID: OBB-665049 Description| Value ---|--- Affected Website:| luxury-s7.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Siemens OpenSSL Vulnerability in Industrial Products (Update E)

1. EXECUTIVE SUMMARY CVSS v3 5.9 ATTENTION : Exploitable remotely Vendor : Siemens Equipment : Industrial Products Vulnerability : Cleartext Transmission of Sensitive Information 2. UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory titled ICSA-18-226-02 Siemens...