CVE-2016-2200

Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to cause a denial of service STOP mode transition via crafted packets on TCP port 102...

CVE-2016-2200

Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to cause a denial of service STOP mode transition via crafted packets on TCP port 102...

Code injection

Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to cause a denial of service STOP mode transition via crafted packets on TCP port 102...

Authentication flaw

Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to bypass a replay protection mechanism via packets on TCP port 102...

CVE-2016-2201

The CVE concerns the Siemens SIMATIC S7-1500 CPU family (before firmware version 1.8.3) where specially crafted packets on TCP port 102 can bypass the device’s replay protection. The issue stems from insufficient replay protection/control flow management, enabling remote attackers to bypass prote...

CVE-2016-2200

The CVE affects Siemens SIMATIC S7-1500 CPU family (before firmware version 1.8.3). A remote attacker can cause a denial-of-service by sending specially crafted TCP packets to port 102, triggering a STOP mode transition; the device reboots and remains in STOP until manual RUN. Root cause: CWE-691...

CVE-2016-2200

Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to cause a denial of service STOP mode transition via crafted packets on TCP port 102...

CVE-2016-2201

Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to bypass a replay protection mechanism via packets on TCP port 102...

siemens Simatic S7-300 (pre-2009 versions) 弱口令

No description provided by source...

Wireshark S7COMM Parser Denial of Service Vulnerability

Wireshark is the most popular network protocol parser. The s7commdecodeudcpuszlsubfunc function in epan/dissectors/packet-s7commszlids.c in the S7COMM parser version 2.0.x prior to Wireshark 2.0.1 fails to validate the list count in the SZL response, allowing remote attackers to divide by zero...

UBUNTU-CVE-2015-8738

The s7commdecodeudcpuszlsubfunc function in epan/dissectors/packet-s7commszlids.c in the S7COMM dissector in Wireshark 2.0.x before 2.0.1 does not validate the list count in an SZL response, which allows remote attackers to cause a denial of service divide-by-zero error and application crash via ...

Siemens Simatic S7 1200 - CPU Command Module (Metasploit)

Siemens Simatic S7 1200 - CPU Command Module Metasploit Exploit Title: Simatic S7 1200 CPU command module Date: 15-12-2015 Exploit Author: Nguyen Manh Hung Vendor Homepage: http://www.siemens.com/ Tested on: Siemens Simatic S7-1214C CVE : None require 'msf/core' class Metasploit3 'Simatic S7-1200...

Siemens SIMATIC S7-1200 CPU Web Vulnerability

OVERVIEW Siemens has identified an open redirect vulnerability in the SIMATIC S7-1200 CPU family. This vulnerability was reported directly to Siemens by Ralf Spenneberg, Hendrik Schwartke, and Maik Brüggemann from OpenSource Training. Siemens has produced an update that mitigates this...

Siemens SIMATIC S7-1500 CPU PLC 跨站请求伪造漏洞

.... Siemens SIMATIC S7-1500 CPU PLC是德国西门子（Siemens）公司的一款TIA博途（集成自动化软件）中的新一代控制器。 .... 使用1.1.2及之前版本固件的Siemens SIMATIC S7-1500 CPU PLC设备中存在跨站请求伪造漏洞。远程攻击者可利用该漏洞执行未授权操作。...

SIEMENS SIMATIC S7-400 拒绝服务漏洞

Siemens SIMATIC S7-400 PN CPU固件设备6 6.0.3之前的6版本中存在漏洞。远程攻击者可利用该漏洞通过特制的ICMP数据包导致拒绝服务（缺陷模式过度和服务中断）。...

Siemens SIMATIC S7-1500 CPU设备安全漏洞

No description provided by source...

Siemens SIMATIC S7-1200固件版本低于4.1.3的设备跨站伪造请求（CSRF）漏洞

漏洞分析 Siemens SIMATIC S7-1200的web端可以与控制PLC的运行以及设备状态数据的获取。而固件版本低于4.1.3的web存在跨站请求伪造（CSRF）漏洞。 由于S7-1200的web端并没有采取针对CSRF攻击的防范措施，如验证HTTP Referer字段，因此攻击者可以实施CSRF攻击，在未授权的情况下进行PLC运行状态改变，更新固件等敏感操作。 漏洞验证 我们通过zoomeye，搜索到一款SIMATIC S7-1200，固件版本号为v3.00.01，经过测试发现存在CSRF漏洞。 验证过程：...

Siemens SIMATIC S7-1200 CSRF Vulnerability (SSA-134003)

Siemens SIMATIC S7-1200 devices are prone to a cross-site request forgery CSRF vulnerability. Copyright C 2015 Greenbone Networks GmbHi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-lat...

Siemens SIMATIC S7-1200 CPU Device Cross-Site Request Forgery Vulnerability

The Siemens SIMATIC S7-1200 CPU device is a small programmable controller from Siemens, Germany, that meets the needs of small and medium-sized automation systems. A cross-site request forgery vulnerability exists in the web server of Siemens SIMATIC S7-1200 CPU devices using firmware versions...

CVE-2015-5698

Cross-site request forgery CSRF vulnerability in the web server on Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...