CVE-2018-13805: Uncontrolled Resource Consumption

A vulnerability has been identified in SIMATIC ET 200SP Open Controller All versions = V2.0 and = V2.0 and = V2.0 and V2.5. An attacker can cause a denial-of-service condition on the network stack by sending a large number of specially crafted packets to the PLC. The PLC will lose its ability to...

Siemens SIMATIC S7-1200 CPU Family Version 4

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely Vendor: Siemens Equipment: SIMATIC S7-1200 CPU Family Version 4 Vulnerability: Cross-Site Request Forgery CSRF 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a CSRF attack if an unsuspecting user is...

The vulnerability of the TCP-server in the SIMATIC WinCC SCADA system allows a intruder to increase their privileges.

The vulnerability of the TCP-server in the SIMATIC WinCC SCADA system is related to access control errors. Exploiting this vulnerability can allow an attacker, operating remotely, to enhance their privileges by using the TCP-port 5678...

SIMATIC WinCC OA Elevation of Privilege Vulnerability

The client-server HMI Human Machine Interface system SIMATIC WinCC Open Architecture OA is part of the SIMATIC HMI family. It is designed for applications that require a high degree of customer-specific adaptability, for large or complex applications and for projects that impose specific system...

CVE-2018-13799

A vulnerability has been identified in SIMATIC WinCC OA V3.14 and prior All versions V3.14-P021. Improper access control to a data point of the affected product could allow an unauthenticated remote user to escalate its privileges in the context of SIMATIC WinCC OA V3.14. This vulnerability could...

CVE-2018-13799

The CVE-2018-13799 vulnerability affects SIMATIC WinCC OA V3.14 and earlier (

Improper access control

A vulnerability has been identified in SIMATIC WinCC OA V3.14 and prior All versions V3.14-P021. Improper access control to a data point of the affected product could allow an unauthenticated remote user to escalate its privileges in the context of SIMATIC WinCC OA V3.14. This vulnerability could...

CVE-2018-13799

A vulnerability has been identified in SIMATIC WinCC OA V3.14 and prior All versions V3.14-P021. Improper access control to a data point of the affected product could allow an unauthenticated remote user to escalate its privileges in the context of SIMATIC WinCC OA V3.14. This vulnerability could...

CVE-2018-13799: Improper Privilege Management

A vulnerability has been identified in SIMATIC WinCC OA V3.14 and prior All versions V3.14-P021. Improper access control to a data point of the affected product could allow an unauthenticated remote user to escalate its privileges in the context of SIMATIC WinCC OA V3.14. This vulnerability could...

ICSA-18-254-04 Siemens SIMATIC WinCC OA

1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SIMATIC WinCC OA Vulnerability: Improper Access Control 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthenticated remote user to escalate...

Siemens SIMATIC HMI Devices Vulnerabilities

OVERVIEW Siemens has identified three vulnerabilities in its SIMATIC HMI devices. These vulnerabilities were reported directly to Siemens by the Quarkslab team and Ilya Karpov from Positive Technologies. Siemens has produced updates that mitigate these vulnerabilities in most of the affected...

Siemens SIMATIC PLCs Reported Issues Summary (Update A)

Overview ICS-CERT has been coordinating multiple reports of issues affecting various models within the Siemens SIMATIC Step 7 S7 programmable logic controller PLC product line. ICS-CERT has coordinated the issues with both Siemens and the researcher and continues to work with both entities. A...

Siemens SIMATIC WinCC (TIA Portal) 10.x < 14 SP1 Upd6 Multiple Vulnerabilities (SSA-979106)

Binary data scadasiemenstiawinccssa-979106.nbin...

Input validation

A vulnerability has been identified in SIMATIC STEP 7 TIA Portal and WinCC TIA Portal V10, V11, V12 All versions, SIMATIC STEP 7 TIA Portal and WinCC TIA Portal V13 All versions V13 SP2 Update 2, SIMATIC STEP 7 TIA Portal and WinCC TIA Portal V14 All versions V14 SP1 Update 6, SIMATIC STEP 7 TIA...

CVE-2018-11454

A vulnerability has been identified in SIMATIC STEP 7 TIA Portal and WinCC TIA Portal V10, V11, V12 All versions, SIMATIC STEP 7 TIA Portal and WinCC TIA Portal V13 All versions V13 SP2 Update 2, SIMATIC STEP 7 TIA Portal and WinCC TIA Portal V14 All versions V14 SP1 Update 6, SIMATIC STEP 7 TIA...

CVE-2018-11453

A vulnerability has been identified in SIMATIC STEP 7 TIA Portal and WinCC TIA Portal V10, V11, V12 All versions, SIMATIC STEP 7 TIA Portal and WinCC TIA Portal V13 All versions V13 SP2 Update 2, SIMATIC STEP 7 TIA Portal and WinCC TIA Portal V14 All versions V14 SP1 Update 6, SIMATIC STEP 7 TIA...

Input validation

A vulnerability has been identified in SIMATIC STEP 7 TIA Portal and WinCC TIA Portal V10, V11, V12 All versions, SIMATIC STEP 7 TIA Portal and WinCC TIA Portal V13 All versions V13 SP2 Update 2, SIMATIC STEP 7 TIA Portal and WinCC TIA Portal V14 All versions V14 SP1 Update 6, SIMATIC STEP 7 TIA...

CVE-2018-11453

A vulnerability has been identified in SIMATIC STEP 7 TIA Portal and WinCC TIA Portal V10, V11, V12 All versions, SIMATIC STEP 7 TIA Portal and WinCC TIA Portal V13 All versions V13 SP2 Update 2, SIMATIC STEP 7 TIA Portal and WinCC TIA Portal V14 All versions V14 SP1 Update 6, SIMATIC STEP 7 TIA...

CVE-2018-11454

CVE-2018-11454 affects Siemens SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) across v10–v15 with default installation permissions. The root cause is improper default file permissions (CWE-276) that allow a local attacker with filesystem access to manipulate files that may be transferred to d...

CVE-2018-11453

Siemens SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) are affected by CVE-2018-11453 due to improper default file permissions in the TIA Portal installer. This allows a local attacker with file system access to insert specially crafted files that may prevent startup (Denial-of-Service) or le...