Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
siemens wincc 7.0 vulnerabilities and exploits
(subscribe to this query)
6.1
CVSSv2
CVE-2013-0675
Buffer overflow in CCEServer (aka the central communications component) in Siemens WinCC prior to 7.2, as used in SIMATIC PCS7 prior to 8.0 SP1 and other products, allows remote malicious users to cause a denial of service via a crafted packet.
Siemens Wincc 7.0
Siemens Simatic Pcs7 7.1
Siemens Wincc 6.0
Siemens Wincc 5.0
Siemens Wincc
Siemens Simatic Pcs7
6
CVSSv2
CVE-2014-4684
The database server in Siemens SIMATIC WinCC prior to 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a request to TCP port 1433.
Siemens Simatic Pcs7
Siemens Wincc 7.1
Siemens Wincc
Siemens Wincc 6.0
Siemens Simatic Pcs7 7.1
Siemens Wincc 5.0
Siemens Wincc 7.0
Siemens Simatic Pcs7 8.0
5.8
CVSSv2
CVE-2013-0677
The web server in Siemens WinCC prior to 7.2, as used in SIMATIC PCS7 prior to 8.0 SP1 and other products, allows remote malicious users to obtain sensitive information or cause a denial of service via a crafted project file.
Siemens Wincc 6.0
Siemens Simatic Pcs7
Siemens Simatic Pcs7 7.1
Siemens Wincc 5.0
Siemens Wincc 7.0
Siemens Wincc
5.8
CVSSv2
CVE-2012-3003
Open redirect vulnerability in an unspecified web application in Siemens WinCC 7.0 SP3 before Update 2 allows remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via a URL in a GET request.
Siemens Wincc 7.0
5.5
CVSSv2
CVE-2012-2596
The XPath functionality in unspecified web applications in Siemens WinCC 7.0 SP3 before Update 2 does not properly handle special characters in parameters, which allows remote authenticated users to read or modify settings via a crafted URL, related to an "XML injection"...
Siemens Wincc 7.0
5
CVSSv2
CVE-2016-5744
Siemens SIMATIC WinCC 7.0 through SP3 and 7.2 allows remote malicious users to read arbitrary WinCC station files via crafted packets.
Siemens Simatic Wincc 7.2
Siemens Simatic Wincc 7.0
5
CVSSv2
CVE-2014-8552
The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before Update 2; SIMATIC PCS 7 7.1 through SP4, 8.0 through SP2, and 8.1; and TIA Portal 13 before Update 6 allows remote malicious users to read arbitrary files via crafted packets.
Siemens Simatic Wincc 7.2
Siemens Simatic Pcs7 7.1
Siemens Simatic Pcs 7 7.1
Siemens Simatic Pcs7 8.0
Siemens Simatic Wincc 7.3
Siemens Simatic Pcs7 8.1
Siemens Simatic Tiaportal 13.0
Siemens Simatic Wincc 7.0
5
CVSSv2
CVE-2014-4682
The WebNavigator server in Siemens SIMATIC WinCC prior to 7.3, as used in PCS7 and other products, allows remote malicious users to obtain sensitive information via an HTTP request.
Siemens Simatic Pcs7
Siemens Simatic Pcs7 8.0
Siemens Wincc 7.1
Siemens Wincc
Siemens Wincc 6.0
Siemens Wincc 7.0
Siemens Simatic Pcs7 7.1
Siemens Wincc 5.0
5
CVSSv2
CVE-2014-0160
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 prior to 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote malicious users to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrat...
Openssl Openssl
Filezilla-project Filezilla Server
Siemens Application Processing Engine Firmware 2.0
Siemens Cp 1543-1 Firmware 1.1
Siemens Simatic S7-1500 Firmware 1.5
Siemens Simatic S7-1500t Firmware 1.5
Siemens Elan-8.2
Siemens Wincc Open Architecture 3.12
Intellian V100 Firmware 1.20
Intellian V100 Firmware 1.21
Intellian V100 Firmware 1.24
Intellian V60 Firmware 1.15
Intellian V60 Firmware 1.25
Mitel Micollab 6.0
Mitel Micollab 7.0
Mitel Micollab 7.1
Mitel Micollab 7.2
Mitel Micollab 7.3.0.104
Mitel Micollab 7.3
Mitel Mivoice 1.1.3.3
Mitel Mivoice 1.2.0.11
Mitel Mivoice 1.3.2.2
4 EDB exploits
2 Nmap scripts
308 Github repositories
4 Articles
5
CVSSv2
CVE-2012-3030
WebNavigator in Siemens WinCC 7.0 SP3 and previous versions, as used in SIMATIC PCS7 and other products, stores sensitive information under the web root with insufficient access control, which allows remote malicious users to read a (1) log file or (2) configuration file via a di...
Siemens Wincc 6.0
Siemens Simatic Pcs7 8.0
Siemens Wincc
Siemens Wincc 7.0
Siemens Wincc 5.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
SSRF
CVE-2023-52162
CVE-2024-23670
CVE-2024-5404
man-in-the-middle
CVE-2024-5214
CVE-2024-4358
CVE-2024-20696
hard-coded
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
NEXT »