2081 matches found
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the web server on Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2015-5698
Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1.3 expose a CSRF vulnerability in the web server. The issue enables remote attackers to hijack user authentication via unspecified vectors. Impact is authentication compromise; firmware 4.1.3 or later is the stated fix. No exploitation d...
PT-2015-7043 · Siemens · Simatic S7-1200 Cpu
Name of the Vulnerable Software and Affected Versions: Siemens SIMATIC S7-1200 CPU devices with firmware prior to 4.1.3 Description: A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of victims via unknown vectors. Recommendations: For firmware...
CVE-2015-5698
Cross-site request forgery CSRF vulnerability in the web server on Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
The vulnerability of the microprogramming software of Siemens Simatic S7-1200 programmable logic controllers allows a hacker to redirect users to malicious URL addresses.
The software of the programmable logic controller Simatic S7-1200 contains a vulnerability that, if exploited, allows an unauthorized remote intruder to redirect users to malicious URL addresses...
Siemens SIMATIC S7-1200 CSRF Vulnerability
OVERVIEW Siemens has identified an CSRF Cross-Site Request Forgery vulnerability in the SIMATIC S7‑1200 CPUs. This vulnerability was reported directly to Siemens by Ralf Spenneberg, Hendrik Schwartke, and Maik Brüggemann from OpenSource Training. Siemens has produced a firmware update to mitigate...
CVE-2015-2177
Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service defect-mode transition via crafted packets on 1 TCP port 102 or 2 Profibus...
Code injection
Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service defect-mode transition via crafted packets on 1 TCP port 102 or 2 Profibus...
CVE-2015-2177
Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service defect-mode transition via crafted packets on 1 TCP port 102 or 2 Profibus...
CVE-2015-2177
Siemens SIMATIC S7-300 CPU family is affected by CVE-2015-2177. Remote attackers can trigger a denial-of-service (defect-mode transition) by sending crafted packets to Port 102/TCP (ISO-TSAP) or via Profibus, without authentication. Impact is a network-based DoS; recovery may require a cold resta...
CVE-2015-2177
Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service defect-mode transition via crafted packets on 1 TCP port 102 or 2 Profibus...
PT-2015-5645
Name of the Vulnerable Software and Affected Versions Siemens SIMATIC S7-300 CPU devices affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in a defect-mode transition. This can be achieved by sending crafted packets on either TCP...
Siemens SIMATIC S7-1200 PLC Firmware Detection
Binary data scadasiemenssimatics71200plcfirmwaredetect.nbin...
Siemens SIMATIC S7-1200 PLC Web Server Detection
Binary data scadasiemenssimatics71200plcwebserverdetect.nbin...
CVE-2015-1048
Open redirect vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...
Open redirect
Open redirect vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...
CVE-2015-1048
CVE-2015-1048 affects Siemens SIMATIC S7-1200 CPU family with firmware prior to 4.1. The vulnerability is an open redirect in the integrated web server that could allow remote attackers to redirect users to arbitrary sites, enabling phishing attempts via unspecified vectors. Public sources (NVD, ...
Siemens SIMATIC S7-1200 Improper Input Validation Vulnerabilities
OVERVIEW Siemens has reported two improper input validation vulnerabilities discovered separately by Prof. Dr. Hartmut Pohl of softScheck GmbH and Arne Vidström of Swedish Defence Research Agency FOI in Siemens’ SIMATIC S7-1200 PLC. Siemens has produced a new version that mitigates these...
Siemens SIMATIC S7-1500 CPU Firmware Vulnerabilities
OVERVIEW Siemens and Positive Technology researchers Yury Goltsev, Llya Karpov, Alexey Osipov, Dmitry Serebryannikov and Alex Timorin have identified nine firmware vulnerabilities in the Siemens SIMATIC S7-1500 CPU Firmware. Siemens has produced a patch that mitigates these vulnerabilities. These...