Simatic WinCC Information Harvester

encoding: UTF-8 This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Simatic WinCC info...

PT-2013-2506

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC RF-MANAGER versions 2008 and earlier Siemens RF-MANAGER Basic versions 3.0 and earlier Description A buffer overflow issue exists in a third-party ActiveX component. This allows remote attackers to execute arbitrary code via a...

CVE-2013-0656: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in a third-party ActiveX component in Siemens SIMATIC RF-MANAGER 2008, and RF-MANAGER Basic 3.0 and earlier, allows remote attackers to execute arbitrary code via a crafted web site...

PT-2013-42: SQL Injection in Siemens WinCC and SIMATIC PCS 7

The specialists of the Positive Research center have detected "SQL Injection" vulnerability in Siemens WinCC and SIMATIC PCS 7. The WinCC Web Navigator 7.2 and Runtime Client OPC protocol have input filtering in the login screen an attacker can overcome, allowing injection of SQL statements into...

PT-2014-13: Privilege Gaining in Siemens SIMATIC WinCC

The specialists of the Positive Research center have detected a Privilege Gaining vulnerability in SIMATIC WinCC. Existing access control of the WinCC WebNavigator server at port 80/tcp and port 443/tcp could allow remote authenticated users to escalate their privileges in WinCC. How to fix Updat...

PT-2014-12: Information Disclosure in Siemens SIMATIC WinCC

The specialists of the Positive Research center have detected an Information disclosure vulnerability in SIMATIC WinCC. The SIMATIC WinCC WebNavigator server at port 80/tcp and port 443/tcp could allow unauthenticated access to sensitive data if an attacker sends specially crafted HTTP requests t...

PT-2012-1016

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC versions prior to 7.3 Description The issue is related to an error that occurs when processing a specially crafted HTTP packet, allowing an unauthenticated attacker to gain access to confidential information by sending a...

PT-2012-1017

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC versions prior to 7.3 Description The issue allows remote authenticated users to gain privileges. This can be achieved via an HTTP or HTTPS request. The vulnerability is related to errors in the code of the WinCC...

PT-2012-1015

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC S7-1200 PLCs versions 2.x through 3.x Description The issue allows remote attackers to cause a denial of service, leading to a defect-mode transition and control outage, via crafted packets to the TCP port 102, also known as th...

PT-2012-1004

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC S7-1200 PLCs versions 2.x through 3.x Description The issue allows remote attackers to cause a denial of service, resulting in a defect-mode transition and control outage, via crafted packets sent to the UDP port 161, also know...

CVE-2012-3040

Cross-site scripting XSS vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x through 3.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URI...

CVE-2012-3040: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x through 3.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URI...

Siemens SIMATIC S7-1200 PLC Detection

Detection of Siemens SIMATIC S7-1200 PLC. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Siemens SIMATIC S7-1200 PLC 'web server' Component XSS Vulnerability (SSA-279823)

Siemens SIMATIC S7-1200 devices are prone to a cross-site scripting XSS vulnerability because they fail to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

PT-2012-1202

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC S7-1200 PLCs versions 2.x through 3.0.1 Description The issue is related to a lack of protection measures for the web server, allowing for the exploitation of a cross-site scripting XSS vulnerability. This vulnerability enables...

CVE-2012-3037

The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authority certificate, which allows remote attackers to spoof the S7-1200 web server by using this key to create a forged certificate...

CVE-2012-3037

The CVE-2012-3037 vul nerability affects Siemens SIMATIC S7-1200 PLCs (2.x) where the private key of the SIMATIC CONTROLLER Certification Authority certificate is not protected in HTTPS storage. This allows remote attackers to forge a certificate and spoof the S7-1200 web server. Affected product...

PT-2012-4454

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC S7-1200 version 2.x Description The issue concerns the Siemens SIMATIC S7-1200 PLC, where the private key of the SIMATIC CONTROLLER Certification Authority certificate is not properly protected. This allows remote attackers to...

CVE-2012-3037: Improper Certificate Validation

The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authority certificate, which allows remote attackers to spoof the S7-1200 web server by using this key to create a forged certificate...

PT-2015-10: Privilege Gaining in Siemens SIMATIC STEP 7 (TIA Portal)

The specialists of the Positive Research center have detected a Privilege Gaining vulnerability in Siemens SIMATIC STEP 7 TIA Portal. Vulnerability exists in TIA Portal due to improper integrity protection of project-file fields containing user’s privileges, which allows attackers to modify user...