CVE-2016-8673

CVE-2016-8673 affects Siemens SIMATIC CP 343-1 Advanced (incl. SIPLUS NET), CP 443-1 Advanced (incl. SIPLUS NET), S7-300/400 CPUs. The flaw allows remote attackers to perform actions via the device web server (port 80/443) using an authenticated user’s session if the user is induced to trigger a ...

CVE-2016-8672

CVE-2016-8672 concerns the SIMATIC web server delivering cookies without the Secure attribute. Affects SIMATIC CP 343-1 Advanced (incl. SIPLUS NET) < v3.0.53 and CP 443-1 Advanced