6.1

CVE-2013-0675

Buffer overflow in CCEServer (aka the central communications component) in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote attackers to cause a denial of service via a crafted packet.

Data is provided by the National Vulnerability Database (NVD)
Siemens ≫ Simatic Pcs7 Version <= 8.0
Siemens ≫ Simatic Pcs7 Version7.1 Updatesp3
Siemens ≫ Wincc Version <= 7.1
Siemens ≫ Wincc Version5.0
Siemens ≫ Wincc Version5.0 Updatesp1
Siemens ≫ Wincc Version6.0
Siemens ≫ Wincc Version6.0 Updatesp2
Siemens ≫ Wincc Version6.0 Updatesp3
Siemens ≫ Wincc Version6.0 Updatesp4
Siemens ≫ Wincc Version7.0
Siemens ≫ Wincc Version7.0 Updatesp1
Siemens ≫ Wincc Version7.0 Updatesp2
Siemens ≫ Wincc Version7.0 Updatesp3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.06% 0.205
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.1 6.5 6.9
AV:A/AC:L/Au:N/C:N/I:N/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.