Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

siemens ozw672 firmware vulnerabilities and exploits

(subscribe to this query)
7.4
CVSSv3

CVE-2017-6873

A vulnerability exists in Siemens OZW672 (all versions) and OZW772 (all versions) that could allow an malicious user to read and manipulate data in TLS sessions while performing a man-in-the-middle (MITM) attack on the integrated web server on port 443/tcp.
Siemens Ozw772 Firmware -Siemens Ozw672 Firmware -
7.5
CVSSv3

CVE-2019-13941

A vulnerability has been identified in OZW672 (All versions < V10.00), OZW772 (All versions < V10.00). Vulnerable versions of OZW Web Server use predictable path names for project files that legitimately authenticated users have created by using the application's expor...
Siemens Ozw672 FirmwareSiemens Ozw772 Firmware
6.1
CVSSv3

CVE-2016-1488

Cross-site scripting (XSS) vulnerability in the login form in the integrated web server on Siemens OZW OZW672 devices prior to 6.00 and OZW772 devices prior to 6.00 allows remote malicious users to inject arbitrary web script or HTML via a crafted URL.
Siemens Ozw672 FirmwareSiemens Ozw772 Firmware
6.5
CVSSv3

CVE-2017-6872

A vulnerability exists in Siemens OZW672 (all versions) and OZW772 (all versions) that could allow an attacker with access to port 21/tcp to access or alter historical measurement data stored on the device.
Siemens Ozw772 Firmware -Siemens Ozw672 Firmware -
NA

CVE-2012-3020

The Siemens Synco OZW Web Server devices OZW672.*, OZW772.*, and OZW775 with firmware prior to 4 have an unspecified default password, which makes it easier for remote malicious users to obtain administrative access via a network session.
Siemens Synco Ozw Web Server Ozw672.01Siemens Synco Ozw Web Server Ozw672.04Siemens Synco Ozw Web Server Ozw672.16Siemens Synco Ozw Web Server Ozw772.01Siemens Synco Ozw Web Server Ozw772.04Siemens Synco Ozw Web Server Ozw772.16Siemens Synco Ozw Web Server Ozw772.250Siemens Synco Ozw Web Server Ozw775Siemens Synco Ozw Web Server Firmware
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
buffer overflowtype confusionserver-side request forgeryCVE-2024-38440CVE-2024-27801CVE-2024-5868CVE-2024-0582CVE-2024-37643CVE-2024-3105
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook