Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

siemens simatic step 7 13 vulnerabilities and exploits

(subscribe to this query)
6.8
CVSSv2
CVE-2015-1601
Siemens SIMATIC STEP 7 (TIA Portal) 12 and 13 prior to 13 SP1 Upd1 allows man-in-the-middle malicious users to obtain sensitive information or modify transmitted data via unspecified vectors.
Siemens Simatic Step 7Siemens Simatic Step 7 12Siemens Simatic Step 7 13
2.1
CVSSv2
CVE-2015-1602
Siemens SIMATIC STEP 7 (TIA Portal) 12 and 13 prior to 13 SP1 Upd1 improperly stores password data within project files, which makes it easier for local users to determine cleartext (1) protection-level passwords or (2) web-server passwords by leveraging the ability to read these...
Siemens Simatic Step 7 12.0Siemens Simatic Step 7Siemens Simatic Step 7 13.0
6.9
CVSSv2
CVE-2015-1594
Untrusted search path vulnerability in Siemens SIMATIC ProSave prior to 13 SP1; SIMATIC CFC prior to 8.0 SP4 Upd9 and 8.1 before Upd1; SIMATIC STEP 7 prior to 5.5 SP1 HF2, 5.5 SP2 before HF7, 5.5 SP3, and 5.5 SP4 before HF4; SIMOTION Scout prior to 4.4; and STARTER prior to 4.4 H...
Siemens StarterSiemens Simatic Prosave 13.0Siemens Simotion ScoutSiemens Simatic CfcSiemens Simatic Cfc 8.1Siemens Simatic Step 7Siemens Simatic Step 7 5.5
2.1
CVSSv2
CVE-2015-1355
Siemens SIMATIC STEP 7 (TIA Portal) prior to 13 SP1 uses a weak password-hash algorithm, which makes it easier for local users to determine cleartext passwords by reading a project file and conducting a brute-force attack.
Siemens Simatic Step 7
4.4
CVSSv2
CVE-2015-1356
Siemens SIMATIC STEP 7 (TIA Portal) prior to 13 SP1 determines a user's privileges on the basis of project-file fields that lack integrity protection, which allows remote malicious users to establish arbitrary authorization data via a modified file.
Siemens Simatic Step 7
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4761command injectionCVE-2024-3676IDORCVE-2024-30039CVE-2024-32113CVE-2024-30049CVE-2024-4776SQL injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook