Show filters
524 Total Results
Displaying 431-440 of 524
Sort by:
Attacker Value
Unknown
CVE-2013-0667
Disclosure Date: March 21, 2013 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in the HMI web application in Siemens WinCC (TIA Portal) 11 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
0
Attacker Value
Unknown
CVE-2013-0672
Disclosure Date: March 21, 2013 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in the HMI web application in Siemens WinCC (TIA Portal) 11 allows remote authenticated users to inject arbitrary web script or HTML via unspecified data.
0
Attacker Value
Unknown
CVE-2011-4515
Disclosure Date: March 21, 2013 (last updated October 05, 2023)
Siemens WinCC (TIA Portal) 11 uses a reversible algorithm for storing HMI web-application passwords in world-readable and world-writable files, which allows local users to obtain sensitive information by leveraging (1) physical access or (2) Sm@rt Server access.
0
Attacker Value
Unknown
CVE-2013-0670
Disclosure Date: March 21, 2013 (last updated October 05, 2023)
CRLF injection vulnerability in the HMI web application in Siemens WinCC (TIA Portal) 11 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL.
0
Attacker Value
Unknown
CVE-2013-0669
Disclosure Date: March 21, 2013 (last updated October 05, 2023)
The HMI web application in Siemens WinCC (TIA Portal) 11 allows remote authenticated users to cause a denial of service (daemon crash) via a crafted HTTP request.
0
Attacker Value
Unknown
CVE-2013-0668
Disclosure Date: March 21, 2013 (last updated October 05, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in the HMI web application in Siemens WinCC (TIA Portal) 11 allow remote attackers to inject arbitrary web script or HTML via a crafted URL.
0
Attacker Value
Unknown
CVE-2013-0671
Disclosure Date: March 21, 2013 (last updated October 05, 2023)
Directory traversal vulnerability in Siemens WinCC (TIA Portal) 11 allows remote authenticated users to read HMI web-application source code and user-defined scripts via a crafted URL.
0
Attacker Value
Unknown
CVE-2012-3034
Disclosure Date: September 18, 2012 (last updated October 05, 2023)
WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to discover a username and password via crafted parameters to unspecified methods in ActiveX controls.
0
Attacker Value
Unknown
CVE-2012-3031
Disclosure Date: September 18, 2012 (last updated October 05, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allow remote attackers to inject arbitrary web script or HTML via a (1) GET parameter, (2) POST parameter, or (3) Referer HTTP header.
0
Attacker Value
Unknown
CVE-2012-3028
Disclosure Date: September 18, 2012 (last updated October 05, 2023)
Cross-site request forgery (CSRF) vulnerability in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to hijack the authentication of arbitrary users for requests that modify data or cause a denial of service.
0
