CVE-2014-1698

概要

参考情報

• ics-cert.us-cert.gov/advisories/ICSA-14-035-01 · US Government Resource
• osvdb.org/102811
• secunia.com/advisories/56651
• securityfocus.com/bid/65349
• siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-342587.pdf · Vendor Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/90935

simatic wincc open architecture のその他の脆弱性

• CVE-2020-7580中 6.7A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 …
• CVE-2019-10929中 5.9A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants…
• CVE-2014-1699中 5.0Siemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to cause a denial of service (monitoring-service outage) via malfo…
• CVE-2014-1697高 7.5The integrated web server in Siemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to execute arbitrary code via crafted…
• CVE-2014-1696中 5.0Siemens SIMATIC WinCC OA before 3.12 P002 January uses a weak hash algorithm for passwords, which makes it easier for remote attackers to ob…