CVE-2014-2259

Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service defect-mode transition via crafted HTTPS packets...

CVE-2014-2255

Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 are affected by CVE-2014-2255, allowing remote attackers to cause a denial of service (defect-mode transition) via crafted HTTP packets. MITRE/ICS references indicate the vulnerability can be exploited over the network. Siemens is...

CVE-2014-2248

Open Redirect vulnerability CVE-2014-2248 affects Siemens SIMATIC S7-1500 CPU PLCs with web server (ports 80/443). Root cause: open redirect in the integrated web server, enabling remote attackers to redirect users to untrusted sites and facilitate phishing. Affects firmware older than 1.5.0; mit...

CVE-2014-2246

Cross-site scripting XSS vulnerability in the integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-2248

Open redirect vulnerability in the integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2014-2246

CVE-2014-2246 is an XSS vulnerability in the integrated web server of Siemens SIMATIC S7-1500 CPU PLCs with firmware older than 1.5.0 . The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The affected component is the web server running on the PLC dev...

CVE-2014-2253

Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service defect-mode transition via crafted Profinet packets...

CVE-2014-2259

Siemens SIMATIC S7-1500 CPU PLCs were affected by CVE-2014-2259: devices running firmware before 1.5.0 could be forced into defect mode (DoS) by specially crafted HTTPS packets. The issue stems from the web/server handling in the CPU firmware, enabling remote DoS without authentication. Siemens r...

CVE-2014-2255

Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service defect-mode transition via crafted HTTP packets...

CVE-2014-2257

Affected product: Siemens SIMATIC S7-1500 CPU PLCs with firmware

CVE-2014-2253

CVE-2014-2253 affects Siemens SIMATIC S7-1500 CPU PLCs with firmware before 1.5.0. The vulnerability allows remote attackers to cause a denial of service (defect‑mode transition) by sending crafted Profinet packets. Public details in the connected docs confirm the affected product family, the att...

CVE-2014-2257

Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service defect-mode transition via crafted ISO-TSAP packets...

CVE-2014-2251

The random-number generator on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 does not have sufficient entropy, which makes it easier for remote attackers to defeat cryptographic protection mechanisms and hijack sessions via unspecified vectors...

CVE-2014-2251

Siemens SIMATIC S7-1500 CPUs with firmware

CVE-2014-2247

This CVE affects Siemens SIMATIC S7-1500 CPU PLCs with firmware = 1.5.0 and apply network segmentation and access controls to reduce exposure.

CVE-2014-2249

CVE-2014-2249 is a CSRF vulnerability in Siemens SIMATIC S7-1500 (< v1.5) and S7-1200 (

Siemens SIMATIC S7-1200 CPU Web Vulnerabilities

OVERVIEW Siemens ProductCERT and Ralf Spenneberg, Hendrik Schwartke, and Maik Brüggemann from OpenSource Training have reported two vulnerabilities in the Siemens SIMATIC S7-1200 CPU family. Siemens has produced a new product release that mitigates these vulnerabilities. AFFECTED PRODUCTS The...

Siemens S7 1214C PN-DCP Request Message Buffer Overflow Vulnerability

The SIMATIC S7-1200 is a small controller module used in low-end discrete automation systems and stand-alone automation. hardware CPU 1214C under the Siemens S7-1200 family supports the Data Link Layer Device Management Protocol PN-DCP PROFINET Discovery and Configuration Protocol for local area...

Siemens Industrial Products OpenSSL Heartbleed Vulnerability (Update B)

OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-14-105-03A Siemens Industrial Products OpenSSL Heartbleed Vulnerability that was published April 29, 2014, on the NCCIC/ICS-CERT web site. Siemens reported to ICS-CERT a list of products affected by the OpenSSL...

[THC-Hydra v7.6] Fast Parallel Network Logon Cracker

Hydra is a parallelized network logon cracker which supports numerous protocols to attack, new modules are easy to add, beside that, it is flexible and very fast. Features IPv6 Support Graphic User Interface Internationalized support RFC 4013 HTTP proxy support SOCKS proxy support The tool suppor...