CVE-2011-4512

CVE-2011-4512 is a CRLF/header-injection vulnerability in the Siemens SIMATIC WinCC/HMI web server. Affected products include WinCC flexible 2004/2005/2007/2008 before SP3; WinCC V11 (TIA Portal) before SP2 Update 1; multiple SIMATIC HMI panels (TP/OP/MP/Comfort/Mobile); WinCC V11 Runtime Advance...

CVE-2011-4508

The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 aka TIA portal before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime generates predictable authentication token...

CVE-2011-4508

CVE-2011-4508: Insecure, predictable authentication token generation in Siemens WinCC/HMI web servers (WinCC flexible 2004–2008 before SP3; WinCC V11 before SP2 Update 1; and related HMI panels) allows remote attackers to bypass authentication by crafting cookies. Affected components include HMI ...

CVE-2011-4876

CVE-2011-4876 is a directory traversal vulnerability in Siemens WinCC family runtimes (WinCC flexible 2004–2008, WinCC V11/TIA Portal, and related SIMATIC HMI panels) where the runtime loader HmiLoad fails to validate strings during Transfer Mode. This allows remote attackers to access or modify ...

CVE-2011-4513

Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 aka TIA portal; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allow user-assisted remote attackers to execute arbitrary code via a crafted project file,...

CVE-2011-4513

CVE-2011-4513 affects Siemens WinCC Flexible (2004–2008), WinCC V11 (TIA Portal), SIMATIC HMI panels (TP/OP/MP/Comfort/Mobile), and WinCC Runtime Advanced/Flexible Runtime. The vulnerability allows user-assisted remote attackers to execute arbitrary code via a crafted project file, related to the...

CVE-2011-4879

Siemens WinCC/HMI Web Server vulnerability CVE-2011-4879: the HMI web server (miniweb.exe) fails to properly handle URIs beginning with 0xfa, enabling remote memory reads or DoS via crafted POST requests. Affected products include WinCC flexible 2004–2008 (pre-SP3), WinCC V11 (TIA Portal) before ...

KLA10394 Multiple vulnerabilities in Siemens

Multiple critical vulnerabilities have been found in Siemens products. Malicious users can exploit these vulnerabilities to read & modify arbitrary files, cause denial of service, execute arbitrary code, bypass authentication, obtain access and inject arbitrary HTTP headers. Below is a complete...

Multiple Siemens SIMATIC Products Authentication Bypass Vulnerabilities

Multiple Siemens SIMATIC products are affected by vulnerabilities that allow attackers to bypass authentication. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Vulnerabilities in Siemens SIMATIC WinCC flexible 2008 SP2

Luigi Auriemma Application: Siemens SIMATIC WinCC flexible Runtime http://www.automation.siemens.com/mcms/human-machine-interface/en/visualization-software/wincc-flexible/wincc-flexible-runtime/Pages/Default.aspx Versions: 2008 SP2 + security patch 1 Platforms: Windows Bugs: A HmiLoad strings sta...

Siemens SIMATIC WinCC flexible multiple security vulnerabilities

HmiLoad and miniweb multiple security vulnerabilities...

Siemens SIMATIC WinCC Flexible (Runtime) - Multiple Vulnerabilities

Siemens SIMATIC WinCC Flexible Runtime - Multiple Vulnerabilities Luigi Auriemma Application: Siemens SIMATIC WinCC flexible Runtime http://www.automation.siemens.com/mcms/human-machine-interface/en/visualization-software/wincc-flexible/wincc-flexible-runtime/Pages/Default.aspx Versions: 2008 SP2...

Siemens SIMATIC WinCC Flexible (Runtime) - Multiple Vulnerabilities

Luigi Auriemma Application: Siemens SIMATIC WinCC flexible Runtime http://www.automation.siemens.com/mcms/human-machine-interface/en/visualization-software/wincc-flexible/wincc-flexible-runtime/Pages/Default.aspx Versions: 2008 SP2 + security patch 1 Platforms: Windows Bugs: A HmiLoad strings sta...

Was The Three Character Password Used To Hack South Houston's Water Treatment Plant A Siemens Default?

Siemens said on Tuesday that it is working with the U.S. Department of Homeland Security to investigate a cyber intrusion into a water treatment plant in South Houston, Texas, but couldn’t confirm that a default, three digit password hard coded into an application used to control the company’s...

CVE-2011-3321

Heap-based buffer overflow in the Siemens WinCC Runtime Advanced Loader, as used in SIMATIC WinCC flexible Runtime and SIMATIC WinCC TIA Portal Runtime Advanced, allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted packet to TCP...

Heap overflow

Heap-based buffer overflow in the Siemens WinCC Runtime Advanced Loader, as used in SIMATIC WinCC flexible Runtime and SIMATIC WinCC TIA Portal Runtime Advanced, allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted packet to TCP...

CVE-2011-3321

Heap-based buffer overflow in the Siemens WinCC Runtime Advanced Loader, as used in SIMATIC WinCC flexible Runtime and SIMATIC WinCC TIA Portal Runtime Advanced, allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted packet to TCP...

CVE-2011-3321

CVE-2011-3321 affects Siemens WinCC flexible Runtime and SIMATIC WinCC (TIA Portal) Runtime Advanced Loader. The issue is a heap-based buffer overflow in the loader’s handling of inputs on 2308/TCP, enabling remote attackers to cause memory corruption and potentially execute arbitrary code or cau...

Many Stuxnet Vulnerabilities Still Unpatched

The media storm over the Stuxnet worm may have passed, but many of the software holes that were used by the worm remain unpatched and leave Siemens customers open to a wide range of potentially damaging cyber attacks, according to industrial control system expert Ralph Langner. Writing on his...

Siemens WinCC Flexible Runtime Heap Overflow

Overview ICS-CERT originally released Advisory ICSA-11-244-01P on the US-CERT secure Portal on September 01, 2011. This web page release was delayed to allow users sufficient time to download and install the update. Independent security researchers Billy Rios and Terry McCorkle have reported a...