siemens wincc open architecture 3.12 vulnerabilities and exploits

(subscribe to this query)

Directory traversal vulnerability in Siemens SIMATIC WinCC OA prior to 3.12 P002 January allows remote malicious users to read arbitrary files via crafted packets to TCP port 4999.

Siemens Simatic Wincc Open Architecture

The integrated web server in Siemens SIMATIC WinCC OA prior to 3.12 P002 January allows remote malicious users to execute arbitrary code via crafted packets to TCP port 4999.

Siemens Simatic Wincc Open Architecture

Siemens SIMATIC WinCC OA prior to 3.12 P002 January allows remote malicious users to cause a denial of service (monitoring-service outage) via malformed HTTP requests to port 4999.

Siemens Simatic Wincc Open Architecture

Siemens SIMATIC WinCC OA prior to 3.12 P002 January uses a weak hash algorithm for passwords, which makes it easier for remote malicious users to obtain access via a brute-force attack.

Siemens Simatic Wincc Open Architecture

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 prior to 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote malicious users to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrat...

4 EDB exploits2 Nmap scripts303 Github repositories4 Articles

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook