699 matches found
Siemens SINEMA Server Privilege Escalation Vulnerability (Update A)
OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-16-215-02 Siemens SINEMA Server Privilege Escalation Vulnerability that was published August 2, 2016, on the NCCIC/ICS-CERT web site. --------- Begin Update A Part 1 of 2 -------- Security researcher rgod working...
Siemens Industrial Products glibc Library Vulnerability (Update C)
OVERVIEW This updated advisory is a follow-up to the advisory update titled ICSA-16-103-01B Siemens Industrial Products glibc Library Vulnerability that was published July 14, 2016, on the NCCIC/ICS-CERT web site. Siemens reports that a buffer overflow vulnerability in the glibc library could...
Siemens Industrial Products glibc Library Vulnerability (Update C)
OVERVIEW This updated advisory is a follow-up to the advisory update titled ICSA-16-103-01B Siemens Industrial Products glibc Library Vulnerability that was published July 14, 2016, on the NCCIC/ICS-CERT web site. Siemens reports that a buffer overflow vulnerability in the glibc library could...
CVE-2014-2731
Multiple unspecified vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to execute arbitrary code via HTTP traffic to port 1 4999 or 2 80...
CVE-2014-2733
Siemens SINEMA Server before 12 SP1 allows remote attackers to cause a denial of service web-interface outage via crafted HTTP requests to port 1 4999 or 2 80...
CVE-2014-2732
Multiple directory traversal vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to access arbitrary files via HTTP traffic to port 1 4999 or 2 80...
Code injection
Multiple unspecified vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to execute arbitrary code via HTTP traffic to port 1 4999 or 2 80...
Design/Logic Flaw
Siemens SINEMA Server before 12 SP1 allows remote attackers to cause a denial of service web-interface outage via crafted HTTP requests to port 1 4999 or 2 80...
CVE-2014-2731
Multiple unspecified vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to execute arbitrary code via HTTP traffic to port 1 4999 or 2 80...
CVE-2014-2733
Siemens SINEMA Server before 12 SP1 allows remote attackers to cause a denial of service web-interface outage via crafted HTTP requests to port 1 4999 or 2 80...
CVE-2014-2732
Siemens SINEMA Server (all versions prior to 12 SP1) contains directory traversal and related input-validation weaknesses in its integrated web server accessible via ports 4999 and 80. The issues allow remote attackers to access arbitrary files on the server, due to traversal and code-execution r...
CVE-2014-2733
Siemens SINEMA Server prior to 12 SP1 is affected by a vulnerability where specially crafted HTTP requests to ports 4999 or 80 can cause a denial of service of the web interface. The issue is associated with improper input handling on the integrated web servers. Siemens has provided a fix in SINE...
CVE-2014-2731
CVE-2014-2731 affects Siemens SINEMA Server prior to 12 SP1, where the integrated web server could allow unauthenticated remote code execution via HTTP requests to ports 4999 or 80. The vulnerability is described as multiple unspecified issues including Code Injection (CWE-94) and Relative Path T...
CVE-2014-2732
Multiple directory traversal vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to access arbitrary files via HTTP traffic to port 1 4999 or 2 80...
Siemens SINEMA Server未明路径遍历远程信息泄漏漏洞
CVE ID:CVE-2014-2732 SINEMA Server是西门子工业网络管理软件能够快速诊断工业以太网、工业交换机SCALANCE、PROFINET和CP443-1、CP343-1、ET200PN等网络设备的通讯状态。 SINEMA Server存在目录遍历漏洞，允许远程攻击者利用漏洞提交特殊的目录遍历序列如'../'来绕过WEB限制，获取敏感信息。 0 SINEMA Server 12 SINEMA Server 12 SP1版本已修复该漏洞，建议用户下载使用： http://www.siemens.com/...
Siemens SINEMA Server特制HTTP请求处理远程拒绝服务漏洞
CVE ID:CVE-2014-2733 SINEMA Server是西门子工业网络管理软件能够快速诊断工业以太网、工业交换机SCALANCE、PROFINET和CP443-1、CP343-1、ET200PN等网络设备的通讯状态。 SINEMA Server处理特制HTTP请求存在安全漏洞，允许远程攻击者利用漏洞提交特制的请求使WEB接口崩溃。 0 SINEMA Server 12 SINEMA Server 12 SP1版本已修复该漏洞，建议用户下载使用： http://www.siemens.com/...
Siemens SINEMA Server未明远程代码执行漏洞
CVE ID:CVE-2014-2731 SINEMA Server是西门子工业网络管理软件能够快速诊断工业以太网、工业交换机SCALANCE、PROFINET和CP443-1、CP343-1、ET200PN等网络设备的通讯状态。 SINEMA Server存在未明安全漏洞，允许远程攻击者利用漏洞执行任意代码。 0 SINEMA Server 12 SINEMA Server 12 SP1版本已修复该漏洞，建议用户下载使用： http://www.siemens.com/...
Siemens SINEMA Vulnerabilities
OVERVIEW Siemens has identified vulnerabilities in SINEMA server. Siemens has produced a software update that mitigates these vulnerabilities. These vulnerabilities could be exploited remotely. AFFECTED PRODUCTS The following Siemens product is affected: SINEMA server: all versions prior to V12 S...
