CVE-2012-3040: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x through 3.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URI...

Siemens SIMATIC S7-1200 PLC 'web server' Component XSS Vulnerability (SSA-279823)

Siemens SIMATIC S7-1200 devices are prone to a cross-site scripting XSS vulnerability because they fail to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Siemens SIMATIC S7-1200 PLC Detection

Detection of Siemens SIMATIC S7-1200 PLC. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PT-2012-1202

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC S7-1200 PLCs versions 2.x through 3.0.1 Description The issue is related to a lack of protection measures for the web server, allowing for the exploitation of a cross-site scripting XSS vulnerability. This vulnerability enables...

CVE-2012-3037

The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authority certificate, which allows remote attackers to spoof the S7-1200 web server by using this key to create a forged certificate...

Code injection

The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authority certificate, which allows remote attackers to spoof the S7-1200 web server by using this key to create a forged certificate...

CVE-2012-3037

The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authority certificate, which allows remote attackers to spoof the S7-1200 web server by using this key to create a forged certificate...

CVE-2012-3037

The CVE-2012-3037 vul nerability affects Siemens SIMATIC S7-1200 PLCs (2.x) where the private key of the SIMATIC CONTROLLER Certification Authority certificate is not protected in HTTPS storage. This allows remote attackers to forge a certificate and spoof the S7-1200 web server. Affected product...

PT-2012-4454

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC S7-1200 version 2.x Description The issue concerns the Siemens SIMATIC S7-1200 PLC, where the private key of the SIMATIC CONTROLLER Certification Authority certificate is not properly protected. This allows remote attackers to...

CVE-2012-3037: Improper Certificate Validation

The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authority certificate, which allows remote attackers to spoof the S7-1200 web server by using this key to create a forged certificate...

Siemens SIMATIC S7-1200 SSL Private Key Reuse Spoofing Vulnerability (SSA-240718)

Siemens SIMATIC S7-1200 devices are prone to a security vulnerability that may allow attackers to spoof SSL certificates. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2012-3017

Siemens SIMATIC S7-400 PN CPU devices with firmware 5.x allow remote attackers to cause a denial of service defect-mode transition and service outage via 1 malformed HTTP traffic or 2 malformed IP packets...

CVE-2012-3016

Siemens SIMATIC S7-400 PN CPU devices with firmware 6 before 6.0.3 allow remote attackers to cause a denial of service defect-mode transition and service outage via crafted ICMP packets...

Code injection

Siemens SIMATIC S7-400 PN CPU devices with firmware 5.x allow remote attackers to cause a denial of service defect-mode transition and service outage via 1 malformed HTTP traffic or 2 malformed IP packets...

Code injection

Siemens SIMATIC S7-400 PN CPU devices with firmware 6 before 6.0.3 allow remote attackers to cause a denial of service defect-mode transition and service outage via crafted ICMP packets...

CVE-2012-3016

Siemens SIMATIC S7-400 PN CPU devices with firmware 6 before 6.0.3 allow remote attackers to cause a denial of service defect-mode transition and service outage via crafted ICMP packets...

CVE-2012-3017

Summary: CVE-2012-3017 affects Siemens SIMATIC S7-400 PN CPU devices running firmware 5.x. The vulnerability allows remote attackers to trigger a denial of service (defect-mode transition and service outage) by sending malformed HTTP traffic or malformed IP packets. The publicly provided document...

CVE-2012-3016

The vulnerability CVE-2012-3016 affects Siemens SIMATIC S7-400 PN CPU devices running firmware 6 up to (but not including) 6.0.3. It allows remote attackers to cause a DoS by sending crafted ICMP packets, potentially forcing the PLC into defect mode with a manual reset needed to restore operation...

CVE-2012-3017

Siemens SIMATIC S7-400 PN CPU devices with firmware 5.x allow remote attackers to cause a denial of service defect-mode transition and service outage via 1 malformed HTTP traffic or 2 malformed IP packets...

PT-2012-4441

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC S7-400 PN CPU devices with firmware 5.x Description The issue allows remote attackers to cause a denial of service, resulting in a defect-mode transition and service outage. This can be achieved via malformed HTTP traffic or...