Browse CVEs

HIGH 10.0 CVE-2015-1448 The integrated management service on Siemens Ruggedcom WIN51xx devices with firmware before SS4.4.4624.35, WIN52xx devices with firmware before SS4.4… Ruggedcom Firmware Mitigation only Fix from $1,9502015-02-02 MEDIUM 5.0 CVE-2015-1357 Siemens Ruggedcom WIN51xx devices with firmware before SS4.4.4624.35, WIN52xx devices with firmware before SS4.4.4624.35, WIN70xx devices with firmwa… Ruggedcom Firmware Mitigation only Fix from $1,6002015-02-02 MEDIUM 5.0 CVE-2014-8552 The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before Update 2; SIMATIC PCS 7 7.1 through SP4, 8.0 through S… Simatic Pcs 7 Mitigation only Fix from $1,6002014-11-26 HIGH 10.0 CVE-2014-8551EPSS 5% The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before Update 2; SIMATIC PCS 7 7.1 through SP4, 8.0 through S… Simatic Pcs 7 Mitigation only Fix from $1,9502014-11-26 MEDIUM 5.8 CVE-2014-2909 CRLF injection vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices 2.x and 3.x allows remote attackers to inject arbitr… Simatic S7 Cpu 1200 Firmware Mitigation only Fix from $1,6002014-04-25 MEDIUM 6.9 CVE-2013-6840 Siemens COMOS before 9.2.0.8.1, 10.0 before 10.0.3.1.40, and 10.1 before 10.1.0.0.2 allows local users to gain database privileges via unspecified ve… Comos No fix yet Fix from $1,6002013-12-10 HIGH 7.2 CVE-2013-4943 The client application in Siemens COMOS before 9.1 Update 458, 9.2 before 9.2.0.6.37, and 10.0 before 10.0.3.0.19 allows local users to gain privileg… Comos Mitigation only Fix from $1,9502013-08-09 MEDIUM 6.8 CVE-2013-4911 Cross-site request forgery (CSRF) vulnerability in Siemens WinCC (TIA Portal) 11 and 12 before 12 SP1 allows remote attackers to hijack the authentic… Wincc Mitigation only Fix from $1,6002013-08-01 MEDIUM 5.8 CVE-2013-4912 Open redirect vulnerability in Siemens WinCC (TIA Portal) 11 and 12 before 12 SP1 allows remote attackers to redirect users to arbitrary web sites an… Wincc Mitigation only Fix from $1,6002013-08-01 HIGH 10.0 CVE-2013-4781 core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller (SBC) before 2 R0.32.0, and 7 before 7 R… Openscape Session Border Controller Mitigation only Fix from $1,9502013-07-18 HIGH 7.8 CVE-2013-4778 core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller (SBC) before 2 R0.32.0, and 7 before 7 R… Openscape Session Border Controller Mitigation only Fix from $1,9502013-07-18 HIGH 7.8 CVE-2013-4780 core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller (SBC) before 2 R0.32.0, and 7 before 7 R… Openscape Session Border Controller Mitigation only Fix from $1,9502013-07-18 HIGH 10.0 CVE-2012-5409EPSS 16% AscoServer.exe in the server in Siemens SiPass integrated MP2.6 and earlier does not properly handle IOCP RPC messages received over an Ethernet netw… Sipass Integrated Mitigation only Fix from $1,9502012-11-01 HIGH 7.8 CVE-2012-3017 Siemens SIMATIC S7-400 PN CPU devices with firmware 5.x allow remote attackers to cause a denial of service (defect-mode transition and service outag… Simatic S7 400 Cpu Firmware Mitigation only Fix from $1,9502012-07-31 MEDIUM 5.8 CVE-2012-3003 Open redirect vulnerability in an unspecified web application in Siemens WinCC 7.0 SP3 before Update 2 allows remote attackers to redirect users to a… Wincc Mitigation only Fix from $1,6002012-06-08 MEDIUM 5.5 CVE-2012-2596 The XPath functionality in unspecified web applications in Siemens WinCC 7.0 SP3 before Update 2 does not properly handle special characters in param… Wincc Mitigation only Fix from $1,6002012-06-08 HIGH 8.5 CVE-2011-4879EPSS 13% miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; th… Wincc Flexible No fix yet Fix from $1,9502012-02-03 HIGH 7.8 CVE-2011-4878EPSS 12% Directory traversal vulnerability in miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (ak… Wincc Flexible No fix yet Fix from $1,9502012-02-03 HIGH 10.0 CVE-2011-4509 The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panel… Wincc Flexible Mitigation only Fix from $1,9502012-02-03 HIGH 10.0 CVE-2011-4513 Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; … Wincc Flexible Mitigation only Fix from $1,9502012-02-03 HIGH 10.0 CVE-2011-4514 The TELNET daemon in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels… Wincc Flexible Mitigation only Fix from $1,9502012-02-03 HIGH 9.3 CVE-2011-4508 The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, C… Wincc Flexible Mitigation only Fix from $1,9502012-02-03 HIGH 9.3 CVE-2011-4875EPSS 14% Stack-based buffer overflow in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP… Wincc Flexible No fix yet Fix from $1,9502012-02-03 HIGH 9.3 CVE-2011-4876EPSS 10% Directory traversal vulnerability in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); … Wincc Flexible No fix yet Fix from $1,9502012-02-03 HIGH 7.1 CVE-2011-4877EPSS 8% HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and M… Wincc Flexible No fix yet Fix from $1,9502012-02-03 MEDIUM 5.0 CVE-2011-4512 CRLF injection vulnerability in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before… Wincc Flexible Mitigation only Fix from $1,6002012-02-03 HIGH 9.3 CVE-2011-3321EPSS 7% Heap-based buffer overflow in the Siemens WinCC Runtime Advanced Loader, as used in SIMATIC WinCC flexible Runtime and SIMATIC WinCC (TIA Portal) Run… Simatic Wincc Flexible Runtime Mitigation only Fix from $1,9502011-09-16 HIGH 7.8 CVE-2010-2772 Siemens Simatic WinCC and PCS 7 SCADA system uses a hard-coded password, which allows local users to access a back-end database and gain privileges, … Simatic Wincc No fix yet Fix from $1,9502010-07-22 HIGH 7.8 CVE-2009-3322 The Siemens Gigaset SE361 WLAN router allows remote attackers to cause a denial of service (device reboot) via a flood of crafted TCP packets to port… Gigaset Se361 Wlan Router No fix yet Fix from $1,9502009-09-23 HIGH 7.8 CVE-2008-7065 Siemens C450 IP and C475 IP VoIP devices allow remote attackers to cause a denial of service (disconnected calls and device reboot) via a crafted SIP… Gigaset C450 Ip No fix yet Fix from $1,9502009-08-25