4843 matches found
Siemens SIMATIC SCALANCE M874-2 2.5G router
Binary data 764589.prm...
Siemens SIMATIC RF685R 6GT2811-6CA10-1AA0 RFID Reader
Binary data 764656.prm...
CVE-2019-10925
A vulnerability has been identified in SIMATIC MV400 family All Versions V7.0.6. An authenticated attacker could escalate privileges by sending specially crafted requests to the integrated webserver. The security vulnerability can be exploited by an attacker with network access to the device. Val...
CVE-2019-10926
A vulnerability has been identified in SIMATIC MV400 family All Versions V7.0.6. Communication with the device is not encrypted. Data transmitted between the device and the user can be obtained by an attacker in a privileged network position. The security vulnerability can be exploited by an...
Privilege escalation
A vulnerability has been identified in SIMATIC MV400 family All Versions V7.0.6. Communication with the device is not encrypted. Data transmitted between the device and the user can be obtained by an attacker in a privileged network position. The security vulnerability can be exploited by an...
Code injection
A vulnerability has been identified in SIMATIC MV400 family All Versions V7.0.6. An authenticated attacker could escalate privileges by sending specially crafted requests to the integrated webserver. The security vulnerability can be exploited by an attacker with network access to the device. Val...
CVE-2019-10925
A vulnerability has been identified in SIMATIC MV400 family All Versions V7.0.6. An authenticated attacker could escalate privileges by sending specially crafted requests to the integrated webserver. The security vulnerability can be exploited by an attacker with network access to the device. Val...
CVE-2019-10926
A vulnerability has been identified in SIMATIC MV400 family All Versions V7.0.6. Communication with the device is not encrypted. Data transmitted between the device and the user can be obtained by an attacker in a privileged network position. The security vulnerability can be exploited by an...
CVE-2019-10926
The CVE-2019-10926 issue affects the SIMATIC MV400 family (MV440) with all versions prior to v7.0.6. It is a Cleartext Transmission of Sensitive Information vulnerability (CWE-319) where data exchanged between the device and user is not encrypted, allowing a privileged-network attacker to eavesdr...
CVE-2019-10925
CVE-2019-10925 affects Siemens SIMATIC MV440 (and MV400 family) with all versions prior to v7.0.6. The root cause is improper privilege management (CWE-269) in the device’s integrated webserver, allowing an authenticated attacker with network access and valid credentials to escalate privileges vi...
Siemens SIMATIC Ident MV420 and Siemens SIMATIC Ident MV440 Information Disclosure Vulnerability
Siemens SIMATIC Ident MV420 and Siemens SIMATIC Ident MV440 are both code reading systems from Siemens, Germany. An information disclosure vulnerability exists in the Siemens SIMATIC Ident MV420 and Siemens SIMATIC Ident MV440, which can be exploited by an attacker to gain access to data passed...
CVE-2019-10925: Improper Access Control
A vulnerability has been identified in SIMATIC MV400 family All Versions V7.0.6. An authenticated attacker could escalate privileges by sending specially crafted requests to the integrated webserver. The security vulnerability can be exploited by an attacker with network access to the device. Val...
CVE-2019-10926: Cleartext Transmission of Sensitive Information
A vulnerability has been identified in SIMATIC MV400 family All Versions V7.0.6. Communication with the device is not encrypted. Data transmitted between the device and the user can be obtained by an attacker in a privileged network position. The security vulnerability can be exploited by an...
PT-2019-2671
Name of the Vulnerable Software and Affected Versions SIMATIC MV400 family versions prior to V7.0.6 Description The issue is related to a lack of encryption in the communication between the device and the user. This allows an attacker in a privileged network position to obtain data transmitted...
PT-2019-2670
Name of the Vulnerable Software and Affected Versions SIMATIC MV400 family versions prior to V7.0.6 Description A vulnerability has been identified that allows an authenticated attacker to escalate privileges by sending specially crafted requests to the integrated webserver. The issue can be...
Siemens SIMATIC Ident MV440 Family (Update A)
1. EXECUTIVE SUMMARY CVSS v3 7.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SIMATIC Ident MV440 Familiy Vulnerabilities: Improper Privilege Management, Cleartext Transmission of Sensitive Information 2. UPDATE INFORMATION This updated advisory is a...
Siemens SIMATIC PCS 7 <= V8.0 RCE (ICSA-19-134-02-0)
Binary data 720264.prm...
Siemens SIMATIC PCS 7 <= V9.0 and TIA Portal <= 15 SQL Injection DoS (ICSA-19-134-08)
Binary data 720262.prm...