Siemens SIMATIC WinCC Sm@rtClient和SIMATIC WinCC Sm@rtClient Lite 信息泄露漏洞

No description provided by source...

Siemens SIMATIC S7-1200固件版本低于4.1.3的设备跨站伪造请求（CSRF）漏洞

漏洞分析 Siemens SIMATIC S7-1200的web端可以与控制PLC的运行以及设备状态数据的获取。而固件版本低于4.1.3的web存在跨站请求伪造（CSRF）漏洞。 由于S7-1200的web端并没有采取针对CSRF攻击的防范措施，如验证HTTP Referer字段，因此攻击者可以实施CSRF攻击，在未授权的情况下进行PLC运行状态改变，更新固件等敏感操作。 漏洞验证 我们通过zoomeye，搜索到一款SIMATIC S7-1200，固件版本号为v3.00.01，经过测试发现存在CSRF漏洞。 验证过程：...

Siemens SIMATIC S7-1200 CSRF Vulnerability (SSA-134003)

Siemens SIMATIC S7-1200 devices are prone to a cross-site request forgery CSRF vulnerability. Copyright C 2015 Greenbone Networks GmbHi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-lat...

CVE-2015-5698

Cross-site request forgery CSRF vulnerability in the web server on Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the web server on Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2015-5698

Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1.3 expose a CSRF vulnerability in the web server. The issue enables remote attackers to hijack user authentication via unspecified vectors. Impact is authentication compromise; firmware 4.1.3 or later is the stated fix. No exploitation d...

PT-2015-7043 · Siemens · Simatic S7-1200 Cpu

Name of the Vulnerable Software and Affected Versions: Siemens SIMATIC S7-1200 CPU devices with firmware prior to 4.1.3 Description: A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of victims via unknown vectors. Recommendations: For firmware...

CVE-2015-5698

Cross-site request forgery CSRF vulnerability in the web server on Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Information disclosure

The Siemens SIMATIC WinCC Sm@rtClient and Sm@rtClient Lite applications before 01.00.01.00 for Android do not properly store passwords, which allows physically proximate attackers to obtain sensitive information via unspecified vectors...

CVE-2015-5084

The CVE-2015-5084 issue affects Siemens SIMATIC WinCC Sm@rtClient and Sm@rtClient Lite for Android prior to 01.00.01.00. The root cause is improper storage of Sm@rtServer passwords, enabling a locally proximate attacker to retrieve sensitive credentials via unspecified vectors. Impact is credenti...

CVE-2015-5084

The Siemens SIMATIC WinCC Sm@rtClient and Sm@rtClient Lite applications before 01.00.01.00 for Android do not properly store passwords, which allows physically proximate attackers to obtain sensitive information via unspecified vectors...

Siemens multiple products there is a security problem, the part of the patch has been released-vulnerability warning-the black bar safety net

Siemens recently released software and firmware security update, saying the company multiple products there are security issues, users are advised to update ASAP. ICS-CERT and Siemens announcement that the SIPROTEC 4 and SIPROTEC Compact devices recently have been affected by the vulnerability...

The vulnerability of the microprogramming software of Siemens Simatic S7-1200 programmable logic controllers allows a hacker to redirect users to malicious URL addresses.

The software of the programmable logic controller Simatic S7-1200 contains a vulnerability that, if exploited, allows an unauthorized remote intruder to redirect users to malicious URL addresses...

Siemens SIMATIC ProSave Detection

Binary data scadaappsiemenssimaticprosavedetect.nbin...

The vulnerability of the microprogramming software of Siemens Simatic S7-1200 programmable logic controllers allows a intruder to perform inter-site fraudulently by manipulating requests.

The software of the programmable logic controller Simatic S7-1200 contains a vulnerability in its built-in server port 80 TCP and port 443 TCP. Exploiting this vulnerability allows for inter-site request forgery attacks...

Siemens SIMATIC ProSave < 1300.100.2201.15 Untrusted Path Arbitrary Code Execution (SSA-451236)

Binary data scadasiemenssimaticprosaveSSA-451236.nbin...

Siemens Patches Ghost Flaw Simatic Product

Siemens has released an update for some of its ICS products that are affected but the glibc Ghost vulnerability that was disclosed in January. The vulnerability affected both the Siemens Sinumerik and Simatic HMI Basic applications, which are used in a variety of industrial situations. “The...

Siemens SIMATIC WinCC (TIA Portal) 13.x < 13 SP1 Upd2 Multiple Vulnerabilities (SSA-487246)

Binary data scadasiemenstiawinccSSA-487246.nbin...

Siemens SIMATIC and SIMATIC WinCC HMI Comfort Panels Denial of Service Vulnerability

Siemens SIMATIC WinCC is a complete Supervisory Control and Data Acquisition SCADA solution for industry, ranging from single-user systems to multi-user systems supporting redundant servers and remote Web client solutions. A security vulnerability in Siemens SIMATIC HMI Comfort Panels WinCC TIA...

Code injection

Siemens SIMATIC HMI Comfort Panels before WinCC TIA Portal 13 SP1 Upd2 and SIMATIC WinCC Runtime Advanced before WinCC TIA Portal 13 SP1 Upd2 allow man-in-the-middle attackers to cause a denial of service via crafted packets on TCP port 102...