Siemens Simatic Improper Control of Generation of Code ('Code Injection')

CRLF injection vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices 2.x and 3.x allows remote attackers to inject arbitrary HTTP headers via unspecified vectors. File data ot500140.nasl...

Siemens Simatic Unspecified Vulnerability

Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service defect-mode transition via crafted HTTP packets. File data ot500210.nasl...

Siemens Simatic Unspecified Vulnerability

A vulnerability has been identified in SIMATIC S7-400 incl. F CPU hardware version 4.0 and below All versions, SIMATIC S7-400 incl. F CPU hardware version 5.0 All firmware versions V5.2, SIMATIC S7-400H CPU hardware version 4.5 and below All versions. The affected CPUs improperly validate S7...

Siemens Simatic Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 and SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. File data ot500269.nasl...

Siemens SIMATIC Compact Field Unit PA Edition PROFINET Interface Detection

Binary data 765350.prm...

Siemens Simatic Unspecified Vulnerability

The random-number generator on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 does not have sufficient entropy, which makes it easier for remote attackers to defeat cryptographic protection mechanisms and hijack sessions via unspecified vectors. File data ot500041.nasl...

Siemens Simatic Improper Input Validation

Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to bypass a replay protection mechanism via packets on TCP port 102. File data ot500314.nasl...

Siemens Simatic Uncontrolled Resource Consumption

A vulnerability has been identified in SIMATIC S7-1200 All versions, SIMATIC S7-1500 All Versions V2.6. An attacker could exhaust the available connection pool of an affected device by opening a sufficient number of connections to the device. Successful exploitation requires an attacker to be abl...

Siemens Simatic Improper Input Validation

Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to cause a denial of service STOP mode transition via crafted packets on TCP port 102. File data ot500287.nasl...

Siemens Simatic Unspecified Vulnerability

Siemens SIMATIC S7-400 PN CPU devices with firmware 6 before 6.0.3 allow remote attackers to cause a denial of service defect-mode transition and service outage via crafted ICMP packets. File data ot500211.nasl...

Siemens Simatic Unspecified Vulnerability

A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P, SIMATIC Compact Field Unit, SIMATIC ET200AL, SIMATIC ET200M...

Siemens Simatic Improper Restriction of Operations within the Bounds of a Memory Buffer

Siemens SIMATIC S7-400 PN CPU devices with firmware 5.x allow remote attackers to cause a denial of service defect-mode transition and service outage via 1 malformed HTTP traffic or 2 malformed IP packets. File data ot500212.nasl...

Siemens Simatic Improper Input Validation

Specially crafted PROFINET DCP broadcast packets could cause a Denial-of-Service condition of affected products on a local Ethernet segment Layer 2. Human interaction is required to recover the systems. PROFIBUS interfaces are not affected. File data ot500277.nasl...

Siemens Simatic Improper Input Validation

A vulnerability has been identified in SIMATIC S7-300 CPU family All versions, SIMATIC S7-300 CPU family incl. related ET200 CPUs and SIPLUS variants All versions, SIMATIC S7-400 PN/DP V6 and below CPU family incl. SIPLUS variants All versions, SIMATIC S7-400 PN/DP V7 CPU family incl. SIPLUS...

Siemens Simatic Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability has been identified in SIMATIC S7-300 CPU family All versions, SIMATIC S7-300 CPU family incl. related ET200 CPUs and SIPLUS variants All versions, SIMATIC S7-400 PN/DP V6 and below CPU family incl. SIPLUS variants All versions, SIMATIC S7-400 PN/DP V7 CPU family incl. SIPLUS...

Siemens Simatic Unspecified Vulnerability

Open redirect vulnerability in the integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. File data ot500265.nasl...

Siemens Simatic Unspecified Vulnerability

Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service defect-mode transition via crafted PROFINET packets, a different vulnerability than CVE-2014-2253. File data ot500177.nasl...

Siemens Simatic Unspecified Vulnerability

Open redirect vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. File data ot500262.nasl...

Siemens Simatic Exposure of Sensitive Information to an Unauthorized Actor

The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authority certificate, which allows remote attackers to spoof the S7-1200 web server by using this key to create a forged certificate. File data ot500030.nasl...

Siemens Simatic Improper Access Control

A vulnerability has been identified in SIMATIC CP 1626 All versions, SIMATIC ET 200SP Open Controller CPU 1515SP PC incl. SIPLUS variants All versions, SIMATIC ET 200SP Open Controller CPU 1515SP PC2 incl. SIPLUS variants All versions = 20.8, SIMATIC ET200SP incl. SIPLUS variants Open Controller...