EUVD-2017-15926

Malware in sbrugna...

EUVD-2017-15927

Malware in sbrugna...

Siemens OZW672和Siemens OZW772 SQL注入漏洞

The OZW device web server is used for remote monitoring of building controller devices, e.g. for monitoring heating control or air conditioning status. A code execution and SQL injection vulnerability exists in the Siemens OZW672 and OZW772 web servers, which can be exploited by an attacker to...

Siemens OZW772 Communications Adapter Detection

Binary data 761997.prm...

Siemens OZW772 Communications Adapter Detection

Binary data 761998.prm...

Siemens OZW772 Communications Adapter Detection

Binary data 761995.prm...

CVE-2017-6873: Missing Authentication for Critical Function

A vulnerability was discovered in Siemens OZW672 all versions and OZW772 all versions that could allow an attacker to read and manipulate data in TLS sessions while performing a man-in-the-middle MITM attack on the integrated web server on port 443/tcp...

CVE-2017-6872: Missing Authentication for Critical Function

A vulnerability was discovered in Siemens OZW672 all versions and OZW772 all versions that could allow an attacker with access to port 21/tcp to access or alter historical measurement data stored on the device...

Siemens OZW672 and OZW772 Man-in-the-Middle Attack Vulnerabilities

Siemens OZW672 and OZW772 are both building controller products from Siemens, Germany. A man-in-the-middle attack vulnerability exists in the Siemens OZW672 and OZW772. This allows an attacker to read and manipulate data in a TLS session while performing a man-in-the-middle MITM attack...

Siemens OZW672 and OZW772 Data Read/Write Vulnerability

Siemens OZW672 and OZW772 are both building controller products from Siemens, Germany. A data read/write vulnerability exists in the Siemens OZW672 and OZW772. An attacker can exploit the vulnerability to read and write historical measurement data under certain conditions, or read and modify data...

CVE-2016-1488

Cross-site scripting XSS vulnerability in the login form in the integrated web server on Siemens OZW OZW672 devices before 6.00 and OZW772 devices before 6.00 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2016-1488: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the login form in the integrated web server on Siemens OZW OZW672 devices before 6.00 and OZW772 devices before 6.00 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...