PT-2021-16746

Name of the Vulnerable Software and Affected Versions SIMATIC S7-PLCSIM V5.4 All versions Description A Denial-of-Service condition can be caused in the application by an attacker with local access to the system when it is used to open a specially crafted file. This can lead to a divide by zero...

CVE-2021-25673: Loop with Unreachable Exit Condition

A vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 All versions. An attacker with local access to the system could cause a Denial-of-Service condition in the application when it is used to open a specially crafted file. As a consequence, the application could enter an infinite loop,...

PT-2021-16744

Name of the Vulnerable Software and Affected Versions SIMATIC S7-PLCSIM V5.4 All versions Description A Denial-of-Service condition can be caused in the application by an attacker with local access to the system when it is used to open a specially crafted file. As a consequence, the application...

CVE-2020-25241: Improper Validation of Specified Index, Position, or Offset in Input

A vulnerability has been identified in SIMATIC MV400 family All Versions V7.0.6. The underlying TCP stack of the affected products does not correctly validate the sequence number for incoming TCP RST packages. An attacker could exploit this to terminate arbitrary TCP sessions...

PT-2021-11121

Name of the Vulnerable Software and Affected Versions: SIMATIC MV400 family versions prior to V7.0.6 Description: A vulnerability has been identified in the SIMATIC MV400 family. The underlying TCP stack of the affected products does not correctly validate the sequence number for incoming TCP RST...

CVE-2021-25675: Divide By Zero

A vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 All versions. An attacker with local access to the system could cause a Denial-of-Service condition in the application when it is used to open a specially crafted file. As a consequence, a divide by zero operation could occur and cause...

CVE-2021-25674: NULL Pointer Dereference

A vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 All versions. An attacker with local access to the system could cause a Denial-of-Service condition in the application when it is used to open a specially crafted file. As a consequence, a NULL pointer deference condition could cause t...

CVE-2020-27632

In SIMATIC MV400 family versions prior to v7.0.6, the ISN generator is initialized with a constant value and has constant increments. An attacker could predict and hijack TCP sessions...

CVE-2020-27632

In SIMATIC MV400 family versions prior to v7.0.6, the ISN generator is initialized with a constant value and has constant increments. An attacker could predict and hijack TCP sessions...

Code injection

In SIMATIC MV400 family versions prior to v7.0.6, the ISN generator is initialized with a constant value and has constant increments. An attacker could predict and hijack TCP sessions...

CVE-2020-27632

In SIMATIC MV400 family versions prior to v7.0.6, the ISN generator is initialized with a constant value and has constant increments. An attacker could predict and hijack TCP sessions...

CVE-2020-27632: Undefined Security Weakness

In SIMATIC MV400 family versions prior to v7.0.6, the ISN generator is initialized with a constant value and has constant increments. An attacker could predict and hijack TCP sessions...

CVE-2020-27632

The CVE-2020-27632 issue affects the SIMATIC MV400 family prior to v7.0.6. The root cause is that the ISN generator is initialized with a constant value and uses constant increments, making initial sequence numbers highly predictable. This can enable an attacker to predict and hijack TCP sessions...

Siemens SIMATIC 代码问题漏洞

Siemens SIMATIC is a configuration software from Siemens. A code issue vulnerability exists in Siemens SIMATIC, no information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

Siemens SIMATIC 数字错误漏洞

SIMATIC S7-PLCSIM V5.4 is a Windows application that simulates the execution of user programs for the simulation of analog S7-300 CPUs, S7-400 CPUs, and WinAC series controllers. A security vulnerability exists in Siemens SIMATIC S7-PLCSIM. An attacker can exploit the vulnerability to cause a...

Siemens SIMATIC S7-PLCSIM Denial of Service Vulnerability

SIMATIC S7-PLCSIM V5.4 is a Windows application that simulates the execution of user programs for the simulation of analog S7-300 CPUs, S7-400 CPUs, and WinAC series controllers. A security vulnerability exists in Siemens SIMATIC S7-PLCSIM. An attacker can exploit the vulnerability to cause a...

Siemens SIMATIC S7-PLCSIM Null Pointer Dereference Vulnerability

SIMATIC S7-PLCSIM V5.4 is a Windows application that simulates the execution of user programs for the simulation of analog S7-300 CPUs, S7-400 CPUs, and WinAC series controllers. A null pointer dereference vulnerability exists in Siemens SIMATIC S7-PLCSIM. An attacker could exploit the...

Vulnerabilities fixed in Siemens Simatic

Siemens has fixed vulnerabilities in Simatic products. The vulnerabilities allow an unauthenticated remote malicious person to remote may be able to launch attacks that result in the following categories of damage: Denial-of-Service DoS Remote code execution Administrator/Root privileges Spoofing...

Siemens SCALANCE and SIMATIC libcurl

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SCALANCE and SIMATIC Vulnerability: Out-of-bounds Read 2. RISK EVALUATION Successful exploitation of this third-party vulnerability could allow an attacker to cause a...

Siemens SIMATIC 安全漏洞

SIMATIC S7-PLCSIM V5.4 is a Windows application that simulates the execution of user programs for the simulation of analog S7-300 CPUs, S7-400 CPUs, and WinAC series controllers. A security vulnerability exists in Siemens SIMATIC S7-PLCSIM. An attacker could exploit the vulnerability to cause a...