Skip to content

Siemens Wincc vulnerabilities

siemens winccCross-site request forgery (CSRF) vulnerability in Siemens WinCC (TIA Portal) 11 and 12 before 12...CVE-2013-49116.8 MediumJuly 31, 2013
siemens simatic pcs7, wincc +1 moreThe Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and...CVE-2013-39594.0 MediumJune 14, 2013
siemens simatic pcs7, wincc +1 moreThe login implementation in the Web Navigator in Siemens WinCC before 7.2 Update 1, as used in...CVE-2013-39587.5 HighJune 14, 2013
siemens simatic pcs7, wincc +1 moreSQL injection vulnerability in the login screen in the Web Navigator in Siemens WinCC before 7.2...CVE-2013-39577.5 HighJune 14, 2013
siemens simatic pcs7, wincc +1 moreDirectory traversal vulnerability in the web server in Siemens WinCC before 7.2, as used in...CVE-2013-06794.0 MediumMarch 21, 2013
siemens simatic pcs7, wincc +1 moreSiemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, does not...CVE-2013-06784.0 MediumMarch 21, 2013
siemens simatic pcs7, wincc +1 moreThe web server in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other...CVE-2013-06775.8 MediumMarch 21, 2013
siemens simatic pcs7, wincc +1 moreSiemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, does not...CVE-2013-06764.0 MediumMarch 21, 2013
siemens simatic pcs7, wincc +1 moreBuffer overflow in CCEServer (aka the central communications component) in Siemens WinCC before 7...CVE-2013-06756.1 MediumMarch 21, 2013
siemens simatic pcs7, wincc +1 moreBuffer overflow in the RegReader ActiveX control in Siemens WinCC before 7.2, as used in SIMATIC...CVE-2013-06746.8 MediumMarch 21, 2013
siemens wincc tia portalCross-site scripting (XSS) vulnerability in the HMI web application in Siemens WinCC (TIA Portal)...CVE-2013-06723.5 LowMarch 21, 2013
siemens wincc tia portalDirectory traversal vulnerability in Siemens WinCC (TIA Portal) 11 allows remote authenticated...CVE-2013-06714.0 MediumMarch 21, 2013
siemens wincc tia portalCRLF injection vulnerability in the HMI web application in Siemens WinCC (TIA Portal) 11 allows...CVE-2013-06704.3 MediumMarch 21, 2013
siemens wincc tia portalThe HMI web application in Siemens WinCC (TIA Portal) 11 allows remote authenticated users to...CVE-2013-06694.0 MediumMarch 21, 2013
siemens wincc tia portalMultiple cross-site scripting (XSS) vulnerabilities in the HMI web application in Siemens WinCC ...CVE-2013-06684.3 MediumMarch 21, 2013
siemens wincc tia portalCross-site scripting (XSS) vulnerability in the HMI web application in Siemens WinCC (TIA Portal)...CVE-2013-06674.3 MediumMarch 21, 2013
siemens wincc tia portalSiemens WinCC (TIA Portal) 11 uses a reversible algorithm for storing HMI web-application...CVE-2011-45154.6 MediumMarch 21, 2013
siemens simatic pcs7, wincc +1 moreWebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products,...CVE-2012-30344.3 MediumSeptember 18, 2012
siemens simatic pcs7, wincc +1 moreSQL injection vulnerability in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in...CVE-2012-30327.5 HighSeptember 18, 2012
siemens simatic pcs7, wincc +1 moreMultiple cross-site scripting (XSS) vulnerabilities in WebNavigator in Siemens WinCC 7.0 SP3 and...CVE-2012-30314.3 MediumSeptember 18, 2012
siemens simatic pcs7, wincc +1 moreWebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products,...CVE-2012-30305.0 MediumSeptember 18, 2012
siemens simatic pcs7, wincc +1 moreCross-site request forgery (CSRF) vulnerability in WebNavigator in Siemens WinCC 7.0 SP3 and...CVE-2012-30286.8 MediumSeptember 18, 2012
siemens winccOpen redirect vulnerability in an unspecified web application in Siemens WinCC 7.0 SP3 before...CVE-2012-30035.8 MediumJune 8, 2012
siemens winccBuffer overflow in the DiagAgent web server in Siemens WinCC 7.0 SP3 through Update 2 allows...CVE-2012-25984.3 MediumJune 8, 2012
siemens winccMultiple directory traversal vulnerabilities in Siemens WinCC 7.0 SP3 before Update 2 allow...CVE-2012-25974.0 MediumJune 8, 2012
siemens winccThe XPath functionality in unspecified web applications in Siemens WinCC 7.0 SP3 before Update 2...CVE-2012-25965.5 MediumJune 8, 2012
siemens winccMultiple cross-site scripting (XSS) vulnerabilities in unspecified web applications in Siemens...CVE-2012-25954.3 MediumJune 8, 2012
siemens simatic hmi panels, wincc, wincc flexible +2 more +4 moreminiweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3...CVE-2011-4879Public exploitEPSS 12.1%8.5 HighFebruary 3, 2012
siemens simatic hmi panels, wincc, wincc flexible +2 more +4 moreDirectory traversal vulnerability in miniweb.exe in the HMI web server in Siemens WinCC flexible...CVE-2011-4878Public exploitEPSS 11.1%7.8 HighFebruary 3, 2012
siemens simatic hmi panels, wincc, wincc flexible +2 more +4 moreHmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 ...CVE-2011-4877Public exploit7.1 HighFebruary 3, 2012
siemens simatic hmi panels, wincc, wincc flexible +2 more +4 moreDirectory traversal vulnerability in HmiLoad in the runtime loader in Siemens WinCC flexible 2004...CVE-2011-4876Public exploit9.3 HighFebruary 3, 2012
siemens simatic hmi panels, wincc, wincc flexible +2 more +4 moreStack-based buffer overflow in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005...CVE-2011-4875Public exploitEPSS 13.8%9.3 HighFebruary 3, 2012
siemens simatic hmi panels, wincc, wincc flexible +2 more +4 moreThe TELNET daemon in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal...CVE-2011-451410.0 HighFebruary 3, 2012
siemens simatic hmi panels, wincc, wincc flexible +2 more +4 moreSiemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP,...CVE-2011-451310.0 HighFebruary 3, 2012
siemens simatic hmi panels, wincc, wincc flexible +2 more +4 moreCRLF injection vulnerability in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007,...CVE-2011-45125.0 MediumFebruary 3, 2012
siemens simatic hmi panels, wincc, wincc flexible +2 more +4 moreCross-site scripting (XSS) vulnerability in the HMI web server in Siemens WinCC flexible 2004,...CVE-2011-45114.3 MediumFebruary 3, 2012
siemens simatic hmi panels, wincc, wincc flexible +2 more +4 moreCross-site scripting (XSS) vulnerability in the HMI web server in Siemens WinCC flexible 2004,...CVE-2011-45104.3 MediumFebruary 3, 2012
siemens simatic hmi panels, wincc, wincc flexible +2 more +4 moreThe HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA...CVE-2011-450910.0 HighFebruary 3, 2012
siemens simatic hmi panels, wincc, wincc flexible +2 more +4 moreThe HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 ...CVE-2011-45089.3 HighFebruary 3, 2012
siemens simatic wincc flexible runtime, simatic wincc runtime +1 moreHeap-based buffer overflow in the Siemens WinCC Runtime Advanced Loader, as used in SIMATIC WinCC...CVE-2011-33219.3 HighSeptember 15, 2011
siemens simatic wincc, simatic pcs 7 +1 moreSiemens Simatic WinCC and PCS 7 SCADA system uses a hard-coded password, which allows local users...CVE-2010-27727.8 HighJuly 22, 2010