Siemens Simatic_wincc_open_architecture
8 CVEs affecting Siemens Simatic_wincc_open_architecture. Latest disclosed: 2020-06-10. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-3991 | Critical | 10.0 | 2019-02-05 | An exploitable heap overflow vulnerability exists in the WkbProgramLow function of WibuKey Network server management, version 6.40.2402.500. A specially crafte… |
CVE-2018-13799 | Critical | 9.1 | 2018-09-12 | A vulnerability has been identified in SIMATIC WinCC OA V3.14 and prior (All versions < V3.14-P021). Improper access control to a data point of the affected pr… |
CVE-2020-7580 | Medium | 6.7 | 2020-06-10 | A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC… |
CVE-2019-10929 | Medium | 5.9 | 2019-08-13 | A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), S… |
CVE-2014-1699 | | 2014-02-07 | Siemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to cause a denial of service (monitoring-service outage) via malformed HTTP requests… | |
CVE-2014-1698 | | 2014-02-07 | Directory traversal vulnerability in Siemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to read arbitrary files via crafted packets to T… | |
CVE-2014-1697 | | 2014-02-07 | The integrated web server in Siemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to execute arbitrary code via crafted packets to TCP por… | |
CVE-2014-1696 | | 2014-02-07 | Siemens SIMATIC WinCC OA before 3.12 P002 January uses a weak hash algorithm for passwords, which makes it easier for remote attackers to obtain access via a b… |