Browse CVEs

HIGH 10.0 CVE-2011-4514 The TELNET daemon in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels… Wincc Flexible Mitigation only Fix from $1,9502012-02-03 HIGH 9.3 CVE-2011-4508 The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, C… Wincc Flexible Mitigation only Fix from $1,9502012-02-03 HIGH 9.3 CVE-2011-4875EPSS 14% Stack-based buffer overflow in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP… Wincc Flexible No fix yet Fix from $1,9502012-02-03 HIGH 9.3 CVE-2011-4876EPSS 10% Directory traversal vulnerability in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); … Wincc Flexible No fix yet Fix from $1,9502012-02-03 HIGH 7.1 CVE-2011-4877EPSS 8% HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and M… Wincc Flexible No fix yet Fix from $1,9502012-02-03 MEDIUM 5.0 CVE-2011-4512 CRLF injection vulnerability in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before… Wincc Flexible Mitigation only Fix from $1,6002012-02-03 HIGH 7.5 CVE-2011-4529EPSS 7% Multiple buffer overflows in Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allow remote attackers to execute arbitrary code via a… Automation License Manager after 5.1 Fix from $1,9502012-01-08 MEDIUM 5.0 CVE-2011-4530 Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 does not properly copy fields obtained from clients, which allows remote attackers … Automation License Manager after 5.1 Fix from $1,6002012-01-08 MEDIUM 5.0 CVE-2011-4531EPSS 9% Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allows remote attackers to cause a denial of service (NULL pointer dereference and … Automation License Manager after 5.1 Fix from $1,6002012-01-08 MEDIUM 5.0 CVE-2011-4532 Absolute path traversal vulnerability in the ALMListView.ALMListCtrl ActiveX control in almaxcx.dll in the graphical user interface in Siemens Automa… Automation License Manager after 5.1 Fix from $1,6002012-01-08 HIGH 9.3 CVE-2011-4055 Buffer overflow in the WebClient ActiveX control in Siemens Tecnomatix FactoryLink 6.6.1 (aka 6.6 SP1), 7.5.217 (aka 7.5 SP2), and 8.0.2.54 allows re… Tecnomatix Factorylink Patch available Fix from $1,9502012-01-08 MEDIUM 5.8 CVE-2011-4056 An unspecified ActiveX control in ActBar.ocx in Siemens Tecnomatix FactoryLink 6.6.1 (aka 6.6 SP1), 7.5.217 (aka 7.5 SP2), and 8.0.2.54 allows remote… Tecnomatix Factorylink Patch available Fix from $1,6002012-01-08 HIGH 9.3 CVE-2011-3321EPSS 7% Heap-based buffer overflow in the Siemens WinCC Runtime Advanced Loader, as used in SIMATIC WinCC flexible Runtime and SIMATIC WinCC (TIA Portal) Run… Simatic Wincc Flexible Runtime Mitigation only Fix from $1,9502011-09-16 HIGH 7.8 CVE-2010-2772 Siemens Simatic WinCC and PCS 7 SCADA system uses a hard-coded password, which allows local users to access a back-end database and gain privileges, … Simatic Wincc No fix yet Fix from $1,9502010-07-22 HIGH 7.8 CVE-2009-3322 The Siemens Gigaset SE361 WLAN router allows remote attackers to cause a denial of service (device reboot) via a flood of crafted TCP packets to port… Gigaset Se361 Wlan Router No fix yet Fix from $1,9502009-09-23 HIGH 7.8 CVE-2008-7065 Siemens C450 IP and C475 IP VoIP devices allow remote attackers to cause a denial of service (disconnected calls and device reboot) via a crafted SIP… Gigaset C450 Ip No fix yet Fix from $1,9502009-08-25 HIGH 10.0 CVE-2008-6993 Siemens Gigaset WLAN Camera 1.27 has an insecure default password, which allows remote attackers to conduct unauthorized activities. NOTE: the proven… Gigaset Wlan Camera Mitigation only Fix from $1,9502009-08-19 HIGH 10.0 CVE-2008-6916 Siemens SpeedStream 5200 with NetPort Software 1.1 allows remote attackers to bypass authentication via an invalid Host header, possibly involving a … Speedstream 5200 No fix yet Fix from $1,9502009-08-07 HIGH 7.3 CVE-2009-1152 Siemens Gigaset SE461 WiMAX router 1.5-BL024.9.6401, and possibly other versions, allows remote attackers to cause a denial of service (device restar… Gigaset Se461 Wimax Router No fix yet Fix from $1,9502009-03-26 HIGH 7.8 CVE-2008-1267 The Siemens SpeedStream 6520 router allows remote attackers to cause a denial of service (web interface crash) via an HTTP request to basehelp_Englis… Speedstream 6520 No fix yet Fix from $1,9502008-03-10 MEDIUM 5.0 CVE-2006-3907 Siemens SpeedStream 2624 allows remote attackers to cause a denial of service (device hang) by sending a crafted packet to the web administrative int… Speedstream Wireless Router Mitigation only Fix from $1,6002006-07-27 HIGH 7.5 CVE-2006-3344 Siemens Speedstream Wireless Router 2624 allows local users to bypass authentication and access protected files by using the Universal Plug and Play … Speedstream Wireless Router Mitigation only Fix from $1,9502006-07-03 HIGH 7.5 CVE-2005-2424 The management interface for Siemens SANTIS 50 running firmware 4.2.8.0, and possibly other products including Ericsson HN294dp and Dynalink RTA300W,… Santis 50 No fix yet Fix from $1,9502005-08-03 HIGH 7.8 CVE-2003-1464 Buffer overflow in Siemens 45 series mobile phones allows remote attackers to cause a denial of service (disconnect and unavailable inbox) via a Shor… M45 Mitigation only Fix from $1,9502003-12-31 CRITICAL 9.8 CVE-2002-1484EPSS 14% DB4Web server, when configured to use verbose debug messages, allows remote attackers to use DB4Web as a proxy and attempt TCP connections to other s… Db4web Patch available Fix from $2,3002003-04-22 MEDIUM 5.0 CVE-2002-0122 Siemens 3568i WAP mobile phones allows remote attackers to cause a denial of service (crash) via an SMS message containing unusual characters. 3568i Wap Patch available Fix from $1,6002002-03-25 MEDIUM 5.0 CVE-2001-0411 Reliant Unix 5.44 and earlier allows remote attackers to cause a denial of service via an ICMP port unreachable packet, which causes Reliant to drop … Reliant Unix Mitigation only Fix from $1,6002001-06-18 HIGH 10.0 CVE-2000-0964 Buffer overflow in the web administration service for the HiNet LP5100 IP-phone allows remote attackers to cause a denial of service and possibly exe… Hinet Lp Mitigation only Fix from $1,9502000-12-19