Siemens SIMATIC PCS7 < V9.1 and TIA Portal < 15.2 Unrestricted Upload of File with Dangerous Type (ICSA-19-192-02)

Binary data 720309.prm...

Siemens SIMATIC RF650R 6GT2811-6AB20-0AA0 RFID Reader Detection

Binary data 765279.prm...

Siemens SIMATIC RF615R 6GT2811-6CC10-2AA0 RFID Reader Detection

Binary data 765278.prm...

Siemens SIMATIC RF650R 6GT2811-6AB20-1AA0 RFID Reader Detection

Binary data 765280.prm...

Siemens SIMATIC RF610R 6GT2811-6BC10-2AA0 RFID Reader Detection

Binary data 765275.prm...

Siemens SIMATIC RF188CI 6GT2002-0JE40 RFID Communication Module Detection

Binary data 765269.prm...

Denial of Service Vulnerability in Multiple Siemens Products (CNVD-2019-36853)

Siemens SIMATIC CFU PA and others are products of Siemens, Germany.Siemens SIMATIC CFU PA is a compact field device.SIMATIC ET 200AL is a distributed I/O system module.SIMATIC ET 200M is a control cabinet for high-density channel applications. modular I/O system module. A denial of service...

CVE-2019-13929

A vulnerability has been identified in SIMATIC IT UADM All versions V1.3. An authenticated remote attacker with network access to port 1434/tcp of SIMATIC IT UADM could potentially recover a password that can be used to gain read and write access to the related TeamCenter station. The security...

CVE-2019-13929

A vulnerability has been identified in SIMATIC IT UADM All versions V1.3. An authenticated remote attacker with network access to port 1434/tcp of SIMATIC IT UADM could potentially recover a password that can be used to gain read and write access to the related TeamCenter station. The security...

CVE-2019-13921

A vulnerability has been identified in SIMATIC WinAC RTX F 2010 All versions SP3 Update 1. Affected versions of the software contain a vulnerability that could allow an unauthenticated attacker to trigger a denial-of-service condition. The vulnerability can be triggered if a large HTTP request is...

Race condition

A vulnerability has been identified in SIMATIC WinAC RTX F 2010 All versions SP3 Update 1. Affected versions of the software contain a vulnerability that could allow an unauthenticated attacker to trigger a denial-of-service condition. The vulnerability can be triggered if a large HTTP request is...

Design/Logic Flaw

A vulnerability has been identified in SIMATIC IT UADM All versions V1.3. An authenticated remote attacker with network access to port 1434/tcp of SIMATIC IT UADM could potentially recover a password that can be used to gain read and write access to the related TeamCenter station. The security...

Race condition

A vulnerability has been identified in SIMATIC S7-400 CPU 414-3 PN/DP V7, SIMATIC S7-400 CPU 414F-3 PN/DP V7, SIMATIC S7-400 CPU 416-3 PN/DP V7, SIMATIC S7-400 CPU 416F-3 PN/DP V7, Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller, Development/Evaluation Kits for PROFIN...

CVE-2019-10923

CVE-2019-10923 affects Siemens Industrial Real-Time devices (e.g., CP1604/CP1616, PROFINET IO DK/EK-ERTEC kits, SCALANCE X‑200IRT, ET200 family, SIMATIC S7-300/400 CPUs, ET200S/ET200M, etc.). A remote attacker with network access can cause a denial of service by breaking the real‑time synchroniza...

CVE-2019-13929

A vulnerability has been identified in SIMATIC IT UADM All versions V1.3. An authenticated remote attacker with network access to port 1434/tcp of SIMATIC IT UADM could potentially recover a password that can be used to gain read and write access to the related TeamCenter station. The security...

CVE-2019-13921

A vulnerability has been identified in SIMATIC WinAC RTX F 2010 All versions SP3 Update 1. Affected versions of the software contain a vulnerability that could allow an unauthenticated attacker to trigger a denial-of-service condition. The vulnerability can be triggered if a large HTTP request is...

CVE-2019-13929

CVE-2019-13929 affects Siemens SIMATIC IT UADM (pre-1.3). A authenticated remote attacker with network access to port 1434/tcp could recover a password enabling read/write access to the related TeamCenter station, without user interaction. The root cause is use of a hard-coded cryptographic key. ...

CVE-2019-13921

CVE-2019-13921 affects Siemens SIMATIC WinAC RTX (F) 2010 (all versions prior to SP3 Update 1). The vulnerability allows an unauthenticated attacker with network access to trigger a denial-of-service condition by sending a large HTTP request to the host running WinAC RTX (F) 2010, potentially imp...

Siemens Industrial Products Local Privilege Escalation Vulnerability (Update I)

1. EXECUTIVE SUMMARY CVSS v3 6.4 ATTENTION: Exploitable locally Vendor: Siemens Equipment: Industrial Products Vulnerability: Improper privilege management 2. UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory titled ICSA-16-313-02 Siemens Industrial Products Local...

CVE-2019-10936

Siemens PROFINET devices (e.g., SIMATIC ET200S/ET200SP and related ecosystem listed in the advisory plugins) are affected by CVE-2019-10936. The root cause is handling large amounts of specially crafted UDP packets, enabling an unauthenticated remote attacker to trigger a denial-of-service condit...