Vulnerabilities > Siemens > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2014-03-16 | CVE-2014-2253 | Denial of Service vulnerability in Siemens SIMATIC S7-1500 Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted Profinet packets. low complexity siemens | 6.1 |
| 2014-03-16 | CVE-2014-2249 | Cross-Site Request Forgery (CSRF) vulnerability in Siemens Simatic S7-1500 CPU Firmware 1.0.1/1.1.0/1.1.1 Cross-site request forgery (CSRF) vulnerability on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 and SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. | 5.8 |
| 2014-03-16 | CVE-2014-2248 | Arbitrary URI Redirection vulnerability in Siemens SIMATIC S7-1500 Open redirect vulnerability in the integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. network siemens | 4.3 |
| 2014-03-16 | CVE-2014-2247 | HTTP Response Splitting vulnerability in Siemens SIMATIC S7-1500 The integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to inject headers via unspecified vectors. network siemens | 5.8 |
| 2014-03-16 | CVE-2014-2246 | Cross-Site Scripting vulnerability in Siemens Simatic S7-1500 CPU Firmware 1.0.1/1.1.0/1.1.1 Cross-site scripting (XSS) vulnerability in the integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 4.3 |
| 2014-02-07 | CVE-2014-1699 | Resource Management Errors vulnerability in Siemens Simatic Wincc Open Architecture Siemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to cause a denial of service (monitoring-service outage) via malformed HTTP requests to port 4999. | 5.0 |
| 2014-02-07 | CVE-2014-1698 | Path Traversal vulnerability in Siemens Simatic Wincc Open Architecture Directory traversal vulnerability in Siemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to read arbitrary files via crafted packets to TCP port 4999. | 5.0 |
| 2014-02-07 | CVE-2014-1696 | Cryptographic Issues vulnerability in Siemens Simatic Wincc Open Architecture Siemens SIMATIC WinCC OA before 3.12 P002 January uses a weak hash algorithm for passwords, which makes it easier for remote attackers to obtain access via a brute-force attack. | 5.0 |
| 2013-12-10 | CVE-2013-6840 | Permissions, Privileges, and Access Controls vulnerability in Siemens Comos Siemens COMOS before 9.2.0.8.1, 10.0 before 10.0.3.1.40, and 10.1 before 10.1.0.0.2 allows local users to gain database privileges via unspecified vectors. | 6.9 |
| 2013-08-01 | CVE-2013-4912 | Improper Input Validation vulnerability in Siemens Wincc 11.0/12.0 Open redirect vulnerability in Siemens WinCC (TIA Portal) 11 and 12 before 12 SP1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks by leveraging improper configuration of SIMATIC HMI panels by the WinCC product. | 5.8 |