4182 matches found
CVE-2015-2822
Siemens SIMATIC HMI Comfort Panels before WinCC TIA Portal 13 SP1 Upd2 and SIMATIC WinCC Runtime Advanced before WinCC TIA Portal 13 SP1 Upd2 allow man-in-the-middle attackers to cause a denial of service via crafted packets on TCP port 102...
CVE-2015-2823
CVE-2015-2823 affects Siemens SIMATIC HMI/WinCC products (HMI Basic Panels 2nd Gen and others) where an attacker can authenticate remotely by using a password hash instead of the password. The issue is a password-hash authentication weakness that can enable unauthorized access to multiple SAP/Win...
CVE-2015-2822
The CVE-2015-2822 issue concerns Siemens SIMATIC HMI/WinCC components vulnerable to remote man-in-the-middle and potential denial-of-service on port 102/TCP. Connected sources specify affected product families and versions, including SIMATIC HMI Comfort Panels and SIMATIC WinCC Runtime Advanced (...
CVE-2015-1602
Siemens SIMATIC STEP 7 TIA Portal 12 and 13 before 13 SP1 Upd1 improperly stores password data within project files, which makes it easier for local users to determine cleartext 1 protection-level passwords or 2 web-server passwords by leveraging the ability to read these files...
CVE-2015-1601
Siemens SIMATIC STEP 7 TIA Portal 12 and 13 before 13 SP1 Upd1 allows man-in-the-middle attackers to obtain sensitive information or modify transmitted data via unspecified vectors...
Default credentials
Siemens SIMATIC STEP 7 TIA Portal 12 and 13 before 13 SP1 Upd1 improperly stores password data within project files, which makes it easier for local users to determine cleartext 1 protection-level passwords or 2 web-server passwords by leveraging the ability to read these files...
Information disclosure
Siemens SIMATIC STEP 7 TIA Portal 12 and 13 before 13 SP1 Upd1 allows man-in-the-middle attackers to obtain sensitive information or modify transmitted data via unspecified vectors...
CVE-2015-1601
CVE-2015-1601 affects Siemens SIMATIC STEP 7 (TIA Portal) 12 and 13 before 13 SP1 Upd1. The root cause is a man-in-the-middle vulnerability in network communications (Port 102/TCP) that can allow attackers to intercept or modify transmitted data, potentially exposing sensitive information or enab...
CVE-2015-1602
Siemens SIMATIC STEP 7 (TIA Portal) v12 and v13 prior to SP1 Upd1 are affected by CVE-2015-1602, which involves storing cleartext passwords in project files, enabling local attackers to reconstruct protection-level and web-server passwords from read files. The issue comprises two related weakness...
CVE-2015-1602
Siemens SIMATIC STEP 7 TIA Portal 12 and 13 before 13 SP1 Upd1 improperly stores password data within project files, which makes it easier for local users to determine cleartext 1 protection-level passwords or 2 web-server passwords by leveraging the ability to read these files...
CVE-2015-1601
Siemens SIMATIC STEP 7 TIA Portal 12 and 13 before 13 SP1 Upd1 allows man-in-the-middle attackers to obtain sensitive information or modify transmitted data via unspecified vectors...
KLA10534 Sensitive information obtain vulnerabilities in Siemens SIMATIC STEP
Improper password store and other uncnown vulnerability were found in SIMATIC STEP 7. By exploiting these vulnerabilities malicious users can obtain sensitive information. These vulnerabilities can be exploited remotely via an unknown vectors. Original advisories Siemens advisory Related products...
Siemens SIMATIC Denial of Service Vulnerability (CNVD-2015-01606)
Siemens SIMATIC is an automation software with a single engineering environment. Siemens SIMATIC S7-300 failed to properly process user messages submitted to Port 102/TCP ISO-TSAP via Proibus, allowing an attacker to exploit the vulnerability and crash the application...
Various Siemens products have search path vulnerabilities
Siemens SIMATIC ProSave; SIMATIC CFC 8 SP4 upd9 8.1 upd1; SIMATIC STEP 7 5.5 SP1 Hf2 5.5 SP2 5.5 SP4 HF4 HF7 sp35.5; SIMOTION Scout 4.4 Starter 4.4 HF3 are all Siemens Siemens Germany company in Germany. A search path vulnerability exists in several Siemens products, allowing local users to gain...
Design/Logic Flaw
Untrusted search path vulnerability in Siemens SIMATIC ProSave before 13 SP1; SIMATIC CFC before 8.0 SP4 Upd9 and 8.1 before Upd1; SIMATIC STEP 7 before 5.5 SP1 HF2, 5.5 SP2 before HF7, 5.5 SP3, and 5.5 SP4 before HF4; SIMOTION Scout before 4.4; and STARTER before 4.4 HF3 allows local users to ga...
CVE-2015-2177
Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service defect-mode transition via crafted packets on 1 TCP port 102 or 2 Profibus...
CVE-2015-2177
Siemens SIMATIC S7-300 CPU family is affected by CVE-2015-2177. Remote attackers can trigger a denial-of-service (defect-mode transition) by sending crafted packets to Port 102/TCP (ISO-TSAP) or via Profibus, without authentication. Impact is a network-based DoS; recovery may require a cold resta...
CVE-2015-1594
CVE-2015-1594 is a local untrusted-search-path vulnerability in Siemens SIMATIC ProSave, SIMATIC CFC, SIMATIC STEP 7, SIMOTION Scout, and STARTER. The root cause is an untrusted search path (CWE-426) that lets a local attacker cause arbitrary code execution by loading a Trojan horse application f...
PT-2015-5645
Name of the Vulnerable Software and Affected Versions Siemens SIMATIC S7-300 CPU devices affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in a defect-mode transition. This can be achieved by sending crafted packets on either TCP...
