Siemens

Simatic Wincc Open Architecture

6 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.2

CVE-2020-7580

  • EPSS 0.05%
  • Published 10.06.2020 17:15:12
  • Last modified 21.11.2024 05:37:24

A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions), SIMATIC NET PC Software V16 (All versions < V16 Upd3),...

5.9

CVE-2019-10929

  • EPSS 0.14%
  • Published 13.08.2019 19:15:14
  • Last modified 21.11.2024 04:20:10

A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V20....

5

CVE-2014-1696

  • EPSS 0.58%
  • Published 07.02.2014 04:52:04
  • Last modified 11.04.2025 00:51:21

Siemens SIMATIC WinCC OA before 3.12 P002 January uses a weak hash algorithm for passwords, which makes it easier for remote attackers to obtain access via a brute-force attack.

7.5

CVE-2014-1697

  • EPSS 4.51%
  • Published 07.02.2014 04:52:04
  • Last modified 11.04.2025 00:51:21

The integrated web server in Siemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to execute arbitrary code via crafted packets to TCP port 4999.

5

CVE-2014-1698

  • EPSS 0.74%
  • Published 07.02.2014 04:52:04
  • Last modified 11.04.2025 00:51:21

Directory traversal vulnerability in Siemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to read arbitrary files via crafted packets to TCP port 4999.

5

CVE-2014-1699

  • EPSS 1.19%
  • Published 07.02.2014 04:52:04
  • Last modified 11.04.2025 00:51:21

Siemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to cause a denial of service (monitoring-service outage) via malformed HTTP requests to port 4999.