Siemens

Wincc Tia Portal

7 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.6

CVE-2011-4515

  • EPSS 0.05%
  • Published 21.03.2013 14:55:01
  • Last modified 11.04.2025 00:51:21

Siemens WinCC (TIA Portal) 11 uses a reversible algorithm for storing HMI web-application passwords in world-readable and world-writable files, which allows local users to obtain sensitive information by leveraging (1) physical access or (2) Sm@rt Se...

4.3

CVE-2013-0667

  • EPSS 0.39%
  • Published 21.03.2013 14:55:01
  • Last modified 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in the HMI web application in Siemens WinCC (TIA Portal) 11 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

4.3

CVE-2013-0668

  • EPSS 0.39%
  • Published 21.03.2013 14:55:01
  • Last modified 11.04.2025 00:51:21

Multiple cross-site scripting (XSS) vulnerabilities in the HMI web application in Siemens WinCC (TIA Portal) 11 allow remote attackers to inject arbitrary web script or HTML via a crafted URL.

4

CVE-2013-0669

  • EPSS 0.17%
  • Published 21.03.2013 14:55:01
  • Last modified 11.04.2025 00:51:21

The HMI web application in Siemens WinCC (TIA Portal) 11 allows remote authenticated users to cause a denial of service (daemon crash) via a crafted HTTP request.

4.3

CVE-2013-0670

  • EPSS 0.33%
  • Published 21.03.2013 14:55:01
  • Last modified 11.04.2025 00:51:21

CRLF injection vulnerability in the HMI web application in Siemens WinCC (TIA Portal) 11 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL.

4

CVE-2013-0671

  • EPSS 0.18%
  • Published 21.03.2013 14:55:01
  • Last modified 11.04.2025 00:51:21

Directory traversal vulnerability in Siemens WinCC (TIA Portal) 11 allows remote authenticated users to read HMI web-application source code and user-defined scripts via a crafted URL.

3.5

CVE-2013-0672

  • EPSS 0.24%
  • Published 21.03.2013 14:55:01
  • Last modified 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in the HMI web application in Siemens WinCC (TIA Portal) 11 allows remote authenticated users to inject arbitrary web script or HTML via unspecified data.