555 matches found
Siemens SPPA-T3000 Heap Buffer Overflow Vulnerability (CNVD-2019-44774)
The SPPA-T3000 is a distributed control system mainly used in thermal power plants and large renewable energy power plants. A heap buffer overflow vulnerability exists in the Siemens SPPA-T3000. This allows an attacker with network access to the MS3000 server to cause a denial of service conditio...
Siemens SPPA-T3000 MS3000 Migration Server Heap Buffer Overflow Vulnerability (CNVD-2019-45411)
SPPA-T3000 is a distributed control system mainly used in thermal power plants and large-scale renewable energy power plants.MS3000 Migration Server is one of the migration servers. A heap buffer overflow vulnerability exists in the Siemens SPPA-T3000 MS3000 Migration Server. An attacker with...
Siemens SPPA-T3000 Information Disclosure Vulnerability
The SPPA-T3000 is a distributed control system mainly used in thermal power plants and large renewable energy power plants. An information disclosure vulnerability exists in the Siemens SPPA-T3000. An attacker can exploit the vulnerability to access logs and configuration files by sending careful...
PT-2019-5348
Name of the Vulnerable Software and Affected Versions SPPA-T3000 Application Server versions prior to Service Pack R8.2 SP2 Description A vulnerability has been identified that exposes directory listings and files containing sensitive information due to insufficient authentication. An attacker...
PT-2019-5346
Name of the Vulnerable Software and Affected Versions SPPA-T3000 Application Server versions prior to Service Pack R8.2 SP2 Description The issue is related to insufficient authentication in the SPPA-T3000 Application Server, which can allow an attacker to access sensitive information. The...
PT-2019-5349
Name of the Vulnerable Software and Affected Versions SPPA-T3000 Application Server versions prior to Service Pack R8.2 SP2 Description The issue is related to an unsecured file upload, allowing an attacker with valid authentication at the RMI interface to potentially gain remote code execution...
PT-2019-5351
Name of the Vulnerable Software and Affected Versions SPPA-T3000 Application Server versions prior to Service Pack R8.2 SP2 Description The issue is related to the availability of the AdminService without authentication on the Application Server, allowing an attacker to access server administrati...
PT-2019-5350
Name of the Vulnerable Software and Affected Versions SPPA-T3000 Application Server versions prior to Service Pack R8.2 SP2 Description A vulnerability has been identified that allows for remote code execution by sending specifically crafted objects to one of the functions of the AdminService,...
PT-2019-5347
Name of the Vulnerable Software and Affected Versions SPPA-T3000 Application Server versions prior to Service Pack R8.2 SP2 Description A security issue has been identified where the RMI communication between the client and the Application Server is unencrypted, allowing an attacker with access t...
Siemens SPPA-T3000 (Update A)
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SPPA-T3000 Vulnerabilities: Improper Input Validation, Deserialization of Untrusted Data, Improper Authentication, Cleartext Transmission of Sensitive Information, Unrestricted...
CVE-2018-4832
CVE-2018-4832 affects Siemens SPPA-T3000 and related OpenPCS/WinCC/BATCH/Route Control components. The vulnerability stems from improper input validation in the RPC service, enabling a remote attacker with network access to cause a DoS in remote and local communication, requiring a reboot to rest...
CVE-2018-4832
A vulnerability has been identified in OpenPCS 7 V7.1 and earlier All versions, OpenPCS 7 V8.0 All versions, OpenPCS 7 V8.1 All versions V8.1 Upd5, OpenPCS 7 V8.2 All versions, OpenPCS 7 V9.0 All versions V9.0 Upd1, SIMATIC BATCH V7.1 and earlier All versions, SIMATIC BATCH V8.0 All versions V8.0...
CVE-2018-4832: Improper Input Validation
A vulnerability has been identified in OpenPCS 7 V7.1 and earlier All versions, OpenPCS 7 V8.0 All versions, OpenPCS 7 V8.1 All versions V8.1 Upd5, OpenPCS 7 V8.2 All versions, OpenPCS 7 V9.0 All versions V9.0 Upd1, SIMATIC BATCH V7.1 and earlier All versions, SIMATIC BATCH V8.0 All versions V8.0...
