Siemens WinCC TIA Portal Vulnerabilities
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
beschreibt (7)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2013-0672US | low3.5 | — | ||
Cross-site scripting (XSS) vulnerability in the HMI web application in Siemens WinCC (TIA Portal) 11 allows remote authenticated users to inject arbitrary web script or HTML via un… | ||||
| CVE-2013-0671US | medium4.0 | — | ||
Directory traversal vulnerability in Siemens WinCC (TIA Portal) 11 allows remote authenticated users to read HMI web-application source code and user-defined scripts via a crafted… | ||||
| CVE-2013-0670US | medium4.3 | — | ||
CRLF injection vulnerability in the HMI web application in Siemens WinCC (TIA Portal) 11 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splittin… | ||||
| CVE-2013-0669US | medium4.0 | — | ||
The HMI web application in Siemens WinCC (TIA Portal) 11 allows remote authenticated users to cause a denial of service (daemon crash) via a crafted HTTP request. | ||||
| CVE-2013-0668US | medium4.3 | — | ||
Multiple cross-site scripting (XSS) vulnerabilities in the HMI web application in Siemens WinCC (TIA Portal) 11 allow remote attackers to inject arbitrary web script or HTML via a… | ||||
| CVE-2013-0667US | medium4.3 | — | ||
Cross-site scripting (XSS) vulnerability in the HMI web application in Siemens WinCC (TIA Portal) 11 allows remote attackers to inject arbitrary web script or HTML via a crafted UR… | ||||
| CVE-2011-4515US | medium4.6 | — | ||
Siemens WinCC (TIA Portal) 11 uses a reversible algorithm for storing HMI web-application passwords in world-readable and world-writable files, which allows local users to obtain s… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-13-079-03 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-13-079-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (7)
- MitigationWinCC (TIA Portal) V11
Siemens addressed these vulnerabilities in their security advisory titled “SSA-212483: Vulnerabilities in WinCC (TIA Portal) V11.”v All vulnerabilities are fixed in the new software version WinCC (TIA Portal) V12. As a workaround to close the Web-based vulnerabilities, the HMI’s Web server may be disabled.
- MitigationWinCC (TIA Portal) V11
Siemens addressed these vulnerabilities in their security advisory titled “SSA-212483: Vulnerabilities in WinCC (TIA Portal) V11.”v All vulnerabilities are fixed in the new software version WinCC (TIA Portal) V12. As a workaround to close the Web-based vulnerabilities, the HMI’s Web server may be disabled.
- MitigationWinCC (TIA Portal) V11
Siemens addressed these vulnerabilities in their security advisory titled “SSA-212483: Vulnerabilities in WinCC (TIA Portal) V11.”v All vulnerabilities are fixed in the new software version WinCC (TIA Portal) V12. As a workaround to close the Web-based vulnerabilities, the HMI’s Web server may be disabled.
- MitigationWinCC (TIA Portal) V11
Siemens addressed these vulnerabilities in their security advisory titled “SSA-212483: Vulnerabilities in WinCC (TIA Portal) V11.”v All vulnerabilities are fixed in the new software version WinCC (TIA Portal) V12. As a workaround to close the Web-based vulnerabilities, the HMI’s Web server may be disabled.
- MitigationWinCC (TIA Portal) V11
Siemens addressed these vulnerabilities in their security advisory titled “SSA-212483: Vulnerabilities in WinCC (TIA Portal) V11.”v All vulnerabilities are fixed in the new software version WinCC (TIA Portal) V12. As a workaround to close the Web-based vulnerabilities, the HMI’s Web server may be disabled.
- MitigationWinCC (TIA Portal) V11
Siemens addressed these vulnerabilities in their security advisory titled “SSA-212483: Vulnerabilities in WinCC (TIA Portal) V11.”v All vulnerabilities are fixed in the new software version WinCC (TIA Portal) V12. As a workaround to close the Web-based vulnerabilities, the HMI’s Web server may be disabled.
- MitigationWinCC (TIA Portal) V11
Siemens addressed these vulnerabilities in their security advisory titled “SSA-212483: Vulnerabilities in WinCC (TIA Portal) V11.”v All vulnerabilities are fixed in the new software version WinCC (TIA Portal) V12. As a workaround to close the Web-based vulnerabilities, the HMI’s Web server may be disabled.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan