CVE-2016-6204

CVE-2016-6204 describes a Cross-Site Scripting (XSS) vulnerability in the integrated web server of Siemens SINEMA Remote Connect Server (all versions before 1.2). The issue allows an attacker to inject script/HTML via a crafted URL, with remote exploitation possible and potential for read-access ...

CVE-2016-6204: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the integrated web server in Siemens SINEMA Remote Connect Server before 1.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

PT-2016-6798

Name of the Vulnerable Software and Affected Versions Siemens SINEMA Remote Connect Server versions prior to 1.2 Description The issue is related to a cross-site scripting XSS vulnerability in the integrated web server. This allows remote attackers to inject arbitrary web script or HTML via a...

Siemens Industrial Products glibc Library Vulnerability (Update C)

OVERVIEW This updated advisory is a follow-up to the advisory update titled ICSA-16-103-01B Siemens Industrial Products glibc Library Vulnerability that was published July 14, 2016, on the NCCIC/ICS-CERT web site. Siemens reports that a buffer overflow vulnerability in the glibc library could...