Siemens SIMATIC S7 Device Detection (HTTP)

HTTP based detection of Siemens SIMATIC S7 devices like S7-300 or S7-1200 PLCs. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Siemens SIMATIC S7 Device Detection Consolidation

Consolidation of Siemens SIMATIC S7 device detections. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Siemens Firmware Updates Patch SIMATIC Vulnerabilities

Siemens has provided firmware updates addressing vulnerabilities in two popular products lines, the SIMATIC WinCC flexible, and the SIMATIC S7-300 CPU family. The SIMATIC S7-300 flaw is a denial-of-service issue that could be remotely exploited to cause the device to go into defect mode, an...

Siemens SIMATIC S7-300 CPU Denial of Service Vulnerability

The Siemens SIMATIC S7-300 CPU is a modular general-purpose controller from Siemens for the manufacturing industry. A denial of service vulnerability exists in the Siemens SIMATIC S7-300 CPU family of devices. By exploiting the vulnerability, an attacker can launch a denial-of-service attack unde...

Siemens SIMATIC NET PC-Software Denial-of-Service Vulnerability

OVERVIEW Siemens has identified a denial-of-service vulnerability in SIMATIC NET PC-Software. Vladimir Dashchenko and Sergey Temnikov from Kaspersky Labs reported this issue directly to Siemens. Siemens has produced a new version to mitigate this vulnerability. This vulnerability could be exploit...

CVE-2016-2846

Siemens SIMATIC S7-1200 CPU devices before 4.0 allow remote attackers to bypass a "user program block" protection mechanism via unspecified vectors...

CVE-2016-2846

CVE-2016-2846 affects Siemens SIMATIC S7-1200 CPU firmware prior to 4.0. The vulnerability allows remote attackers to bypass the user program block protection mechanism. The root cause is a protection mechanism failure in older firmware, enabling bypass of access protections and potentially permi...

Siemens SIMATIC S7-1200 CPU Privilege Bypass Vulnerability

The Siemens SIMATIC S7-1200 CPU device is a small programmable controller from Siemens that meets the needs of small and medium-sized automation systems. A privilege bypass vulnerability exists in Siemens SIMATIC S7-1200 CPU versions prior to 4.0, which can be exploited by an attacker to bypass t...

Siemens SIMATIC S7-1500 Denial of Service Vulnerability (CNVD-2016-00931)

The Siemens SIMATIC S7-1500 is a controller family with a modular structure. A denial of service vulnerability exists in Siemens SIMATIC S7-1500 versions prior to 1.8.3 when processing specially crafted TCP packets. An attacker can exploit the vulnerability to cause the CPU to automatically reboo...

Siemens SIMATIC S7-1500 Bypass Mechanism Vulnerability

The Siemens SIMATIC S7-1500 is a controller family with a modular structure. A bypass mechanism vulnerability exists in the Siemens SIMATIC S7-1500. A remote attacker can exploit the vulnerability to bypass the replay protection mechanism with the help of specially crafted packets on TCP port 102...

CVE-2016-2201

Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to bypass a replay protection mechanism via packets on TCP port 102...

CVE-2016-2200

Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to cause a denial of service STOP mode transition via crafted packets on TCP port 102...

CVE-2016-2201

The CVE concerns the Siemens SIMATIC S7-1500 CPU family (before firmware version 1.8.3) where specially crafted packets on TCP port 102 can bypass the device’s replay protection. The issue stems from insufficient replay protection/control flow management, enabling remote attackers to bypass prote...

CVE-2016-2200

The CVE affects Siemens SIMATIC S7-1500 CPU family (before firmware version 1.8.3). A remote attacker can cause a denial-of-service by sending specially crafted TCP packets to port 102, triggering a STOP mode transition; the device reboots and remains in STOP until manual RUN. Root cause: CWE-691...

iniNet SpiderControl PLC Editor Simatic Detection

Binary data scadaappininetspidercontrolplceditorsimaticdetect.nbin...

iniNet SpiderControl PLC Editor Simatic 6.30.04 Local Privilege Escalation

Binary data scadaininetspidercontrolplceditorsimatic63004.nbin...

Siemens Simatic S7 1200 - CPU Command Module (Metasploit)

Siemens Simatic S7 1200 - CPU Command Module Metasploit Exploit Title: Simatic S7 1200 CPU command module Date: 15-12-2015 Exploit Author: Nguyen Manh Hung Vendor Homepage: http://www.siemens.com/ Tested on: Siemens Simatic S7-1214C CVE : None require 'msf/core' class Metasploit3 'Simatic S7-1200...

Siemens Simatic S7 1200 CPU Command Module (MSF) Exploit

Exploit for hardware platform in category remote exploits Exploit Title: Simatic S7 1200 CPU command module Date: 15-12-2015 Exploit Author: Nguyen Manh Hung Vendor Homepage: http://www.siemens.com/ Tested on: Siemens Simatic S7-1214C CVE : None require 'msf/core' class Metasploit3 'Simatic S7-12...

Siemens Simatic S7 1200 - CPU Command Module (Metasploit)

Exploit Title: Simatic S7 1200 CPU command module Date: 15-12-2015 Exploit Author: Nguyen Manh Hung Vendor Homepage: http://www.siemens.com/ Tested on: Siemens Simatic S7-1214C CVE : None require 'msf/core' class Metasploit3 'Simatic S7-1200 CPU START/STOP Module', 'Description' = %q Update 2015...

iniNet SpiderControl PLC Editor Simatic 6.30.04 - Insecure File Permissions Vulnerability

Exploit for windows platform in category local exploits iniNet SpiderControl PLC Editor Simatic 6.30.04 Insecure File Permissions Vendor: iniNet Solutions GmbH Product web page: http://www.spidercontrol.net Affected version: 6.30.04 Build 6300400 Summary: Modular and automated engineering is...