CVE-2019-6579

A vulnerability has been identified in Spectrum Power 4 with Web Office Portal. An attacker with network access to the web server on port 80/TCP or 443/TCP could execute system commands with administrative privileges. The security vulnerability could be exploited by an unauthenticated attacker wi...

Security feature bypass

A vulnerability has been identified in Spectrum Power 4 with Web Office Portal. An attacker with network access to the web server on port 80/TCP or 443/TCP could execute system commands with administrative privileges. The security vulnerability could be exploited by an unauthenticated attacker wi...

CVE-2019-6579

Siemens Spectrum Power 4 with Web Office Portal is affected by CVE-2019-6579 (Improper Neutralization of Special Elements Used in a Command). An unauthenticated attacker with network access to the web server on port 80/443 can execute system commands with administrative privileges, potentially co...

Default credentials

A vulnerability was discovered in Siemens ViewPort for Web Office Portal before revision number 1453 that could allow an unauthenticated remote user to upload arbitrary code and execute it with the permissions of the operating-system user running the web server by sending specially crafted networ...

CVE-2017-6869

A vulnerability was discovered in Siemens ViewPort for Web Office Portal before revision number 1453 that could allow an unauthenticated remote user to upload arbitrary code and execute it with the permissions of the operating-system user running the web server by sending specially crafted networ...

CVE-2017-6869

A vulnerability was discovered in Siemens ViewPort for Web Office Portal before revision number 1453 that could allow an unauthenticated remote user to upload arbitrary code and execute it with the permissions of the operating-system user running the web server by sending specially crafted networ...

CVE-2017-6869

Siemens ViewPort for Web Office Portal prior to revision 1453 is affected by CVE-2017-6869. An unauthenticated remote attacker can upload arbitrary code and execute it with the OS user running the web server by sending specially crafted packets to ports 443/TCP or 80/TCP. The issue is categorized...

Siemens Patches Critical Intel AMT Flaw in Industrial Products

Siemens patched two critical vulnerabilities that affected its industrial products this week. One, tied to a recently disclosed flaw in Active Management Technology – a function of certain Intel processors – could have allowed an attacker to gain system privileges. Another vulnerability could hav...

Siemens ViewPort for Web Office Portal Remote Code Execution Vulnerability

Web Office Portal provides authorized users with read-only access to retrieve current data from the Control Center solution, Spectrum Power™. A remote code execution vulnerability exists in Siemens ViewPort for Web Office Portal. An unauthenticated attacker could upload arbitrary code and execute...

Siemens Viewport for Web Office Portal

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: Viewport for Web Office Portal Vulnerability: Improper Authentication AFFECTED PRODUCTS Siemens reports that the vulnerability affects the following ViewPort for Web Office Portal products: ViewPort...