CVSS: 7.1EPSS: 0%CPEs: 209EXPL: 0CVE-2017-2680
https://notcve.org/view.php?id=CVE-2017-2680
Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required to recover the systems. PROFIBUS interfaces are not affected. Los paquetes de difusión PROFINET DCP especialmente elaborados podrían causar una condición de denegación de servicio de los productos afectados en un segmento Ethernet local (capa 2). Se requiere la interacción humana para recuperar los sistemas. • http://www.securityfocus.com/bid/98369 http://www.securitytracker.com/id/1038463 https://cert-portal.siemens.com/productcert/html/ssa-284673.html https://cert-portal.siemens.com/productcert/html/ssa-293562.html https://cert-portal.siemens.com/productcert/html/ssa-546832.html https://cert-portal.siemens.com/productcert/pdf/ssa-284673.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-546832.pdf https://ics-cert.us- • CWE-400: Uncontrolled Resource Consumption •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2016-2846
https://notcve.org/view.php?id=CVE-2016-2846
Siemens SIMATIC S7-1200 CPU devices before 4.0 allow remote attackers to bypass a "user program block" protection mechanism via unspecified vectors. Dispositivos Siemens SIMATIC S7-1200 CPU en versiones anteriores a 4.0 permiten a atancantes remotos eludir un mecanismo de protección de "bloqueo de programa de usuario" a través de vectores no especificados. • http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-833048.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-833048.pdf https://ics-cert.us-cert.gov/advisories/ICSA-16-075-01 • CWE-254: 7PK - Security Features •
CVSS: 7.5EPSS: 1%CPEs: 2EXPL: 0CVE-2015-5698 – Siemens SIMATIC S7-1200 Cross Site Request Forgery
https://notcve.org/view.php?id=CVE-2015-5698
Cross-site request forgery (CSRF) vulnerability in the web server on Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Vulnerabilidad de CSRF en el servidor web en dispositivos Siemens SIMATIC S7-1200 CPU con firmware en versiones anteriores a 4.1.3, permite a atacantes remotos secuestrar la autenticación de víctimas no especificadas a través de vectores no especificados. Siemens SIMATIC S7-1200 suffers from a CPU functionality related cross site request forgery vulnerability. • http://packetstormsecurity.com/files/172315/Siemens-SIMATIC-S7-1200-Cross-Site-Request-Forgery.html http://www.securitytracker.com/id/1033419 http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-134003.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-134003.pdf https://ics-cert.us-cert.gov/advisories/ICSA-15-239-02 • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0CVE-2015-1048
https://notcve.org/view.php?id=CVE-2015-1048
Open redirect vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Vulnerabilidad de la redirección abierta en el servidor web integrado en los dispositivos Siemens SIMATIC S7-1200 CPU con firmware anterior a 4.1 permite a atacantes remotos redirigir usuarios a sitios web arbitrarios ay realizar ataques de phishing a través de vectores no especifcados. • http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-597212.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-597212.pdf •
CVSS: 4.3EPSS: 0%CPEs: 8EXPL: 1CVE-2014-2908 – Siemens SIMATIC S7-1200 CPU - Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2014-2908
Cross-site scripting (XSS) vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices 2.x and 3.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de XSS en el servidor web integrado en dispositivos Siemens SIMATIC S7-1200 CPU 2.x y 3.x permite a atacantes remotos inyectar script Web o HTML arbitrarios a través de vectores no especificados. Siemens SIMATIC S7-1200 CPU suffers from a cross site scripting vulnerability. • https://www.exploit-db.com/exploits/44687 http://ics-cert.us-cert.gov/advisories/ICSA-14-114-02 http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-892012.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-892012.pdf • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •