Vulnerabilities > Siemens

DATE CVE VULNERABILITY TITLE RISK
2003-04-22 CVE-2002-1484 Server-Side Request Forgery (SSRF) vulnerability in Siemens Db4Web 3.4/3.6
DB4Web server, when configured to use verbose debug messages, allows remote attackers to use DB4Web as a proxy and attempt TCP connections to other systems (port scan) via a request for a URL that specifies the target IP address and port, which produces a connection status in the resulting error message.
network
low complexity
siemens CWE-918
critical
9.8
2002-03-25 CVE-2002-0122 Denial of Service vulnerability in Siemens 3568I WAP 0.0
Siemens 3568i WAP mobile phones allows remote attackers to cause a denial of service (crash) via an SMS message containing unusual characters.
network
low complexity
siemens
5.0
2001-07-02 CVE-2001-0384 Unspecified vulnerability in Siemens Reliant Unix
ppd in Reliant Sinix allows local users to corrupt arbitrary files via a symlink attack in the /tmp/ppd.trace file.
local
low complexity
siemens
2.1
2001-06-18 CVE-2001-0411 Denial-Of-Service vulnerability in Siemens Reliant Unix 5.44
Reliant Unix 5.44 and earlier allows remote attackers to cause a denial of service via an ICMP port unreachable packet, which causes Reliant to drop all connections to the source address of the packet.
network
low complexity
siemens
5.0
2000-12-19 CVE-2000-0964 Unspecified vulnerability in Siemens Hinet LP 5100.0
Buffer overflow in the web administration service for the HiNet LP5100 IP-phone allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long GET request.
network
low complexity
siemens
critical
10.0
1997-12-10 CVE-1999-0017 FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce. 7.5