CVE-2013-0677: Exposure of Sensitive Information to an Unauthorized Actor

The web server in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote attackers to obtain sensitive information or cause a denial of service via a crafted project file...

CVE-2013-0679: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the web server in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote authenticated users to read arbitrary files via vectors involving a query for a pathname...

CVE-2013-0674: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the RegReader ActiveX control in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote attackers to execute arbitrary code via a long parameter...

PT-2013-43: Hard-coded credentials in Siemens WinCC and SIMATIC PCS 7

The specialists of the Positive Research center have detected a vulnerability in Siemens WinCC and SIMATIC PCS 7 related to hard-coded credentials used in the login system . Attackers with network access and knowledge of the credentials could log into the Web Navigator Web applications as an...

Siemens SIMATIC RF-MANAGER KeyHelp.ocx Buffer Overflow

Binary data scadasiemensrfmanageractivex.nbin...

Siemens SIMATIC RF-MANAGER Detection

Binary data scadaappsiemensrfmanagerdetect.nbin...

Buffer overflow

Buffer overflow in a third-party ActiveX component in Siemens SIMATIC RF-MANAGER 2008, and RF-MANAGER Basic 3.0 and earlier, allows remote attackers to execute arbitrary code via a crafted web site...

CVE-2013-0656

Buffer overflow in a third-party ActiveX component in Siemens SIMATIC RF-MANAGER 2008, and RF-MANAGER Basic 3.0 and earlier, allows remote attackers to execute arbitrary code via a crafted web site...

CVE-2013-0656

The CVE-2013-0656 vulnerability concerns a heap-based buffer overflow in a third-party ActiveX component used by Siemens SIMATIC RF Manager products. Affected are SIMATIC RF Manager 2008 and RF Manager Basic v3.0 and earlier; the overflow arises when processing content from a crafted web site, en...

Simatic WinCC Information Harvester

encoding: UTF-8 This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Simatic WinCC info...

CVE-2013-0656: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in a third-party ActiveX component in Siemens SIMATIC RF-MANAGER 2008, and RF-MANAGER Basic 3.0 and earlier, allows remote attackers to execute arbitrary code via a crafted web site...

PT-2013-42: SQL Injection in Siemens WinCC and SIMATIC PCS 7

The specialists of the Positive Research center have detected "SQL Injection" vulnerability in Siemens WinCC and SIMATIC PCS 7. The WinCC Web Navigator 7.2 and Runtime Client OPC protocol have input filtering in the login screen an attacker can overcome, allowing injection of SQL statements into...

PT-2014-13: Privilege Gaining in Siemens SIMATIC WinCC

The specialists of the Positive Research center have detected a Privilege Gaining vulnerability in SIMATIC WinCC. Existing access control of the WinCC WebNavigator server at port 80/tcp and port 443/tcp could allow remote authenticated users to escalate their privileges in WinCC. How to fix Updat...

PT-2014-12: Information Disclosure in Siemens SIMATIC WinCC

The specialists of the Positive Research center have detected an Information disclosure vulnerability in SIMATIC WinCC. The SIMATIC WinCC WebNavigator server at port 80/tcp and port 443/tcp could allow unauthenticated access to sensitive data if an attacker sends specially crafted HTTP requests t...

CVE-2012-3040

Cross-site scripting XSS vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x through 3.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URI...

CVE-2012-3040: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x through 3.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URI...

Siemens SIMATIC S7-1200 PLC Detection

Detection of Siemens SIMATIC S7-1200 PLC. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Siemens SIMATIC S7-1200 PLC 'web server' Component XSS Vulnerability (SSA-279823)

Siemens SIMATIC S7-1200 devices are prone to a cross-site scripting XSS vulnerability because they fail to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

CVE-2012-3037

The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authority certificate, which allows remote attackers to spoof the S7-1200 web server by using this key to create a forged certificate...

CVE-2012-3037

The CVE-2012-3037 vul nerability affects Siemens SIMATIC S7-1200 PLCs (2.x) where the private key of the SIMATIC CONTROLLER Certification Authority certificate is not protected in HTTPS storage. This allows remote attackers to forge a certificate and spoof the S7-1200 web server. Affected product...