Page 5 of 52 results (0.014 seconds)

CVSS: 5.3EPSS: 1%CPEs: 15EXPL: 0

CVE-2016-2201

https://notcve.org/view.php?id=CVE-2016-2201

08 Feb 2016 — Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to bypass a replay protection mechanism via packets on TCP port 102. Dispositivos Siemens SIMATIC S7-1500 CPU en versiones anteriores a 1.8.3 permiten a atacantes remotos eludir el mecanismo de protección de repetición a través de paquetes manipulados sobre el puerto 102 TCP. • http://www.securityfocus.com/bid/83110 • CWE-20: Improper Input Validation •

CVSS: 7.5EPSS: 15%CPEs: 13EXPL: 1

CVE-2014-5074 – Siemens SIMATIC S7-1500 CPU - Remote Denial of Service

https://notcve.org/view.php?id=CVE-2014-5074

17 Aug 2014 — Siemens SIMATIC S7-1500 CPU devices with firmware before 1.6 allow remote attackers to cause a denial of service (device restart and STOP transition) via crafted TCP packets. Los dispositivos Siemens SIMATIC S7-1500 CPU con firmware anterior a 1.6 permiten a atacantes remotos causar una denegación de servicio (reinicio de dispositivos y transición STOP) a través de paquetes TCP manipulados. • https://www.exploit-db.com/exploits/44693 •

CVSS: 7.5EPSS: 94%CPEs: 54EXPL: 84

CVE-2014-0160 – OpenSSL Information Disclosure Vulnerability

https://notcve.org/view.php?id=CVE-2014-0160

07 Apr 2014 — The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug. Las implementaciones de (1) TLS y (2) DTLS en OpenSSL 1.0.1 en versiones anteriores a 1.0.1g no manejan adecuadamente paquetes Heartbeat Extension, lo qu... • https://packetstorm.news/files/id/180746 • CWE-125: Out-of-bounds Read CWE-201: Insertion of Sensitive Information Into Sent Data •

CVSS: 6.1EPSS: 1%CPEs: 4EXPL: 0

CVE-2014-2246

https://notcve.org/view.php?id=CVE-2014-2246

16 Mar 2014 — Cross-site scripting (XSS) vulnerability in the integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de XSS en el servidor web integrado en dispositivos de Siemens SIMATIC S7-1500 CPU PLC con firmware anterior a 1.5.0 permite a atacantes remotos inyectar script Web o HTML arbitrarios a través de vectores no especificados. • http://ics-cert.us-cert.gov/advisories/ICSA-14-073-01 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 7.5EPSS: 1%CPEs: 4EXPL: 0

CVE-2014-2247

https://notcve.org/view.php?id=CVE-2014-2247

16 Mar 2014 — The integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to inject headers via unspecified vectors. El servidor web integrado en dispositivos Siemens SIMATIC S7-1500 CPU PLC con firmware anterior a 1.5.0 permite a atacantes remotos inyectar cabeceras a través de vectores no especificados. • http://ics-cert.us-cert.gov/advisories/ICSA-14-073-01 •

CVSS: 6.1EPSS: 1%CPEs: 4EXPL: 0

CVE-2014-2248

https://notcve.org/view.php?id=CVE-2014-2248

16 Mar 2014 — Open redirect vulnerability in the integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Vulnerabilidad de redirección abierta en el servidor web integrado en dispositivos de Siemens SIMATIC S7-1500 CPU PLC con firmware anterior a 1.5.0 permite a atacantes remotos redirigir usuarios hacia sitios web arbitrarios y realizar ataques de phishing a través de... • http://ics-cert.us-cert.gov/advisories/ICSA-14-073-01 •

CVSS: 8.8EPSS: 0%CPEs: 4EXPL: 0

CVE-2014-2249

https://notcve.org/view.php?id=CVE-2014-2249

16 Mar 2014 — Cross-site request forgery (CSRF) vulnerability on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 and SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Una vulnerabilidad de tipo cross-site request forgery (CSRF) en dispositivos SIMATIC S7-1500 CPU PLC de Siemens con versión de firmware anterior a 1.5.0 y dispositivos SIMATIC S7-1200 CPU PLC con versión de firmware anterior a 4.0 de Si... • http://ics-cert.us-cert.gov/advisories/ICSA-14-073-01 • CWE-352: Cross-Site Request Forgery (CSRF) •

CVSS: 8.3EPSS: 1%CPEs: 4EXPL: 0

CVE-2014-2251

https://notcve.org/view.php?id=CVE-2014-2251

16 Mar 2014 — The random-number generator on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 does not have sufficient entropy, which makes it easier for remote attackers to defeat cryptographic protection mechanisms and hijack sessions via unspecified vectors. El generador de números aleatorios en dispositivos de Siemens SIMATIC S7-1500 CPU PLC con firmware anterior a 1.5.0 no tiene suficiente entropía, lo que facilita a atacantes remotos derrotar mecanismos de protección criptográficos y secuestrar se... • http://ics-cert.us-cert.gov/advisories/ICSA-14-073-01 •

CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 0

CVE-2014-2253

https://notcve.org/view.php?id=CVE-2014-2253

16 Mar 2014 — Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted Profinet packets. Dispositivos de Siemens SIMATIC S7-1500 CPU PLC con firmware anterior a 1.5.0 permiten a atacantes remotos causar una denegación de servicio (transición de modo defecto) a través de paquetes Profinet manipulados. • http://ics-cert.us-cert.gov/advisories/ICSA-14-073-01 •

CVSS: 7.8EPSS: 2%CPEs: 4EXPL: 0

CVE-2014-2255

https://notcve.org/view.php?id=CVE-2014-2255

16 Mar 2014 — Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted HTTP packets. Dispositivos de Siemens SIMATIC S7-1500 CPU PLC con firmware anterior a 1.5.0 permiten a atacantes remotos causar una denegación de servicio (transición de modo defecto) a través de paquetes HTTP manipulados. • http://ics-cert.us-cert.gov/advisories/ICSA-14-073-01 •