CVE-2016-5743

This CVE (CVE-2016-5743) affects Siemens SIMATIC WinCC/PCS 7/WinCC Runtime Professional. The vulnerability stems from improper input validation that allows specially crafted packets to trigger remote code execution on unauthenticated users. Affected products include WinCC before 7.3 Update 10 and...

CVE-2016-5744

CVE-2016-5744 affects Siemens SIMATIC WinCC (and WinCC Runtime Professional) via improper input validation, allowing remote, unauthenticated attackers to extract arbitrary files from WinCC stations. Affected: WinCC V7.0 SP2, WinCC V7.0 SP3, and WinCC V7.2 (WinCC Runtime Professional and related c...

CVE-2016-5874: Improper Input Validation

Siemens SIMATIC NET PC-Software before 13 SP2 allows remote attackers to cause a denial of service OPC UA service outage via crafted TCP packets...

CVE-2016-5743: Improper Input Validation

Siemens SIMATIC WinCC before 7.3 Update 10 and 7.4 before Update 1, SIMATIC BATCH before 8.1 SP1 Update 9 as distributed in SIMATIC PCS 7 through 8.1 SP1, SIMATIC OpenPCS 7 before 8.1 Update 3 as distributed in SIMATIC PCS 7 through 8.1 SP1, SIMATIC OpenPCS 7 before 8.2 Update 1 as distributed in...

CVE-2016-5744: Exposure of Sensitive Information to an Unauthorized Actor

Siemens SIMATIC WinCC 7.0 through SP3 and 7.2 allows remote attackers to read arbitrary WinCC station files via crafted packets...

Siemens SIMATIC STEP 7 (TIA Portal) Information Disclosure Vulnerabilities

OVERVIEW Siemens has released a new version of SIMATIC STEP 7 TIA Portal to mitigate information disclosure vulnerabilities. These vulnerabilities were reported directly to Siemens by Dmitry Sklyarov and Gleb Gritsai from Positive Technologies. Siemens has produced a new version to mitigate these...

The vulnerability of the microprogramming software of Siemens Simatic S7-1200 programmable logic controllers allows a malicious actor to cause malfunctions during maintenance operations.

The software of the programmable logic controller Simatic S7-1200 contains a vulnerability that causes loss of access to the device during the processing of specific TCP/IP packets...

The vulnerability of the microprogramming software of Siemens Simatic S7-1200 programmable logic controllers allows a malicious individual to inject HTML headers.

The software of the programmable logic controller Simatic S7-1200 contains a vulnerability that allows a malicious individual to inject an HTML header into the device’s web server...

The vulnerability of the microprogramming software of Siemens Simatic S7-1200 programmable logic controllers allows a malicious actor to cause malfunctions during maintenance operations.

The software of the Siemens SIMATIC S7-1200 programmable logic controller contains a vulnerability. When this vulnerability is exploited, the device can be switched into an emergency mode by sending a special TCP/IP packet to port 102. This emergency mode persists until a hardware restart is...

The vulnerability of the microprogramming software of Siemens Simatic S7-1200 programmable logic controllers allows a malicious actor to cause malfunctions during maintenance operations.

The software of the Siemens SIMATIC S7-1200 programmable logic controller contains a vulnerability. When this vulnerability is exploited, a special SNMP packet can be sent to trigger a “failure to service” condition for the device...

The vulnerability of the microprogramming software of Siemens Simatic S7-1200 programmable logic controllers allows a malicious actor to cause malfunctions during maintenance operations.

The software of the programmable logic controller Simatic S7-1200 contains a vulnerability that allows a malicious individual to put the device into an emergency mode by sending special HTTP packets on port 80 TCP. This action is necessary before a “cold” reboot can be performed...

The vulnerability of the microprogramming software of Siemens Simatic S7-1200 programmable logic controllers allows a malicious actor to cause malfunctions during maintenance operations.

The software of the Siemens SIMATIC S7-1200 programmable logic controller contains a vulnerability. When exploited, it is possible to switch the device into an emergency mode by sending specially crafted PROFINET packets. This emergency mode persists until a hardware restart is performed...

The vulnerability of the Simatic PCS 7 software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability exists in the implementation of the Web Navigator interface in Siemens WinCC, due to the presence of a strictly encrypted user account. Exploiting this vulnerability allows malicious actors, operating remotely, to gain access to the system through a specially crafted request...

The vulnerability of the automated system for managing technological processes of SIMATIC WinCC OA allows a malicious individual to execute arbitrary codes without going through authentication procedures.

The vulnerability of the SIMATIC Winn CC OAM software relates to errors that occur when processing specially crafted TCP packets. Exploiting this vulnerability allows a malicious individual to execute arbitrary code by sending specially crafted packets to port 4999...

The vulnerability of the automated system for managing technological processes of SIMATIC WinCC allows a malicious individual to increase their privileges level.

Access rights to system objects allow a local user to obtain limited, enhanced privileges as a user of the operating system...

The vulnerability of the automated system for managing technological processes, SIMATIC WinCC, allows authorized users to elevate their privileges.

The vulnerability of Siemens SIMATIC WinCC software relates to errors that occur when processing a specially crafted command on the database server. Exploiting this vulnerability allows authorized users to elevate their privileges within the database...

The vulnerability of the automated system for managing technological processes, SIMATIC WinCC, allows authorized users to elevate their privileges remotely.

The vulnerability of Siemens SIMATIC WinCC software is related to errors in the code of the WinCC WebNavigator server. Exploiting this vulnerability allows authorized users to remotely escalate their privileges...

The vulnerability of the automated system for managing technological processes of SIMATIC WinCC OA allows a malicious individual to elevate their privileges level.

The vulnerability of the SIMATIC Winn CC OAM software lies in the use of a weak hashing algorithm for hashing user account data. Exploiting this vulnerability allows a malicious individual to elevate their privileges by using a brute-force method...

The vulnerability of the automated system for managing technological processes of SIMATIC WinCC allows a remote attacker to elevate their privileges.

Siemens SIMATIC WinCC software vulnerabilities, related to a tightly encrypted encryption key. Exploiting this vulnerability allows a malicious individual to elevate their privileges in the WinCC Project Administration application, provided that the data transmitted by the authorized user over th...

The vulnerability of the automated system for managing technological processes of SIMATIC WinCC OA allows a malicious individual to bypass the file system without going through the authentication procedures as a regular user.

The vulnerability of the SIMATIC WinCC OA software is related to errors that occur when processing specially crafted TCP packets. Exploiting this vulnerability allows a malicious individual to cause a failure in the monitoring service of SIMATIC WinCC OA without going through the authentication...