Siemens SIMATIC S7-1200 CVE-2019-13945 Local Unauthorized Access Vulnerability

...

Siemens SIMATIC S7-1200 CPU Access Vulnerability

Siemens SIMATIC S7-1200 CPU family products are designed for discrete and continuous control in industrial environments such as manufacturing, food and beverage, and chemical industries. A security vulnerability exists in the Siemens SIMATIC S7-1200 CPU. An attacker could exploit this security...

PT-2019-4317

Name of the Vulnerable Software and Affected Versions SIMATIC S7-1200 CPU family incl. SIPLUS variants versions prior to V4.x SIMATIC S7-1200 CPU family V4.x incl. SIPLUS variants versions with Function State FS 11 SIMATIC S7-200 SMART CPU CR20s 6ES7 288-1CR20-0AA1 versions = V2.3.0 and Function...

Siemens Simatic Improper Input Validation

A vulnerability has been identified in SIMATIC CP 443-1 OPC UA All versions, SIMATIC CP443-1 OPC UA incl. SIPLUS NET variants All versions, SIMATIC ET 200 Open Controller CPU 1515SP PC2 incl. SIPLUS variants All versions = V7.1 = V2.5 V2.6.1, SIMATIC S7-1500 Software Controller All versions betwe...

Siemens SIMATIC TDC CP51M1 Improper Input Validation (ICSA-19-253-05)

Binary data 720316.prm...

Siemens SIMATIC Compact Field Unit PA Edition PROFINET Interface Detection

Binary data 765350.prm...

Siemens SIMATIC TDC CP51M1 6DD1661-0AE1 Communication Module Detection

Binary data 765351.prm...

Siemens Simatic Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the web server on Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. File data ot500035.nasl...

Siemens Simatic Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Cross-site scripting XSS vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices 2.x and 3.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. File data ot500128.nasl...

Siemens Simatic Uncontrolled Resource Consumption

A vulnerability has been identified in SIMATIC ET 200SP Open Controller All versions = V2.0 and = V2.0 and = V2.0 and V2.5. An attacker can cause a denial-of-service condition on the network stack by sending a large number of specially crafted packets to the PLC. The PLC will lose its ability to...

Siemens Simatic Uncontrolled Resource Consumption

A vulnerability has been identified in SIMATIC S7-1200 All versions, SIMATIC S7-1500 All Versions V2.6. An attacker could exhaust the available connection pool of an affected device by opening a sufficient number of connections to the device. Successful exploitation requires an attacker to be abl...

Siemens Simatic Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Cross-site scripting XSS vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x through 3.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URI. File data ot500100.nasl...

Siemens Simatic Improper Restriction of Operations within the Bounds of a Memory Buffer

Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service defect-mode transition and control outage via crafted packets to TCP port 102 aka the ISO-TSAP port. File data ot500131.nasl...

Siemens Dk Uncontrolled Resource Consumption

A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller All versions, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 All versions, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P All versions, SIMATIC CFU PA All...

Siemens Simatic Improper Control of Generation of Code ('Code Injection')

CRLF injection vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices 2.x and 3.x allows remote attackers to inject arbitrary HTTP headers via unspecified vectors. File data ot500140.nasl...

Siemens Simatic Improper Restriction of Operations within the Bounds of a Memory Buffer

Siemens SIMATIC S7-400 PN CPU devices with firmware 5.x allow remote attackers to cause a denial of service defect-mode transition and service outage via 1 malformed HTTP traffic or 2 malformed IP packets. File data ot500212.nasl...

Siemens Simatic Improper Access Control

A vulnerability has been identified in SIMATIC ET 200SP Open Controller CPU 1515SP PC incl. SIPLUS variants All versions, SIMATIC ET 200SP Open Controller CPU 1515SP PC2 incl. SIPLUS variants All versions = 20.8, SIMATIC ET200SP incl. SIPLUS variants Open Controller CPU 1515SP PC All versions,...

Siemens Simatic Improper Input Validation

A vulnerability has been identified in SIMATIC S7-1500 CPU All versions = V2.0 and V2.5, SIMATIC S7-1500 CPU All versions = V1.8.5. Specially crafted network packets sent to port 80/tcp or 443/tcp could allow an unauthenticated remote attacker to cause a Denial-of-Service condition of the device...

Siemens Simatic Improper Input Validation

Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service defect-mode transition via crafted packets on 1 TCP port 102 or 2 Profibus. File data ot500088.nasl...

Siemens Simatic Cross-Site Request Forgery (CSRF)

A vulnerability has been identified in SIMATIC S7-1200 CPU family version 4 All versions V4.2.3. The web interface could allow a Cross-Site Request Forgery CSRF attack if an unsuspecting user is tricked into accessing a malicious link. Successful exploitation requires user interaction by a...