|
246361
|
8.8 |
HIGH
Network
|
siemens
|
simatic_hmi_comfort_panels_firmware simatic_hmi_comfort_outdoor_panels_firmware simatic_hmi_ktp_mobile_panels_ktp400f_firmware simatic_hmi_ktp_mobile_panels_ktp700_firmware simatic_hmi_kt…
|
A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V14), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (All versions < V14), SIMATIC HMI KTP Mobile Panels KTP400…
|
CWE-20
Improper Input Validation
|
CVE-2018-13814
|
2024-11-21 12:48 |
2018-12-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246362
|
8.1 |
HIGH
Network
|
siemens
|
simatic_hmi_comfort_panels_firmware simatic_hmi_comfort_outdoor_panels_firmware simatic_hmi_ktp_mobile_panels_ktp400f_firmware simatic_hmi_ktp_mobile_panels_ktp700_firmware simatic_hmi_kt…
|
A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15 Update 4), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (All versions < V15 Update 4), SIMATIC HMI KTP Mo…
|
CWE-601
Open Redirect
|
CVE-2018-13813
|
2024-11-21 12:48 |
2018-12-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246363
|
7.5 |
HIGH
Network
|
siemens
|
simatic_hmi_comfort_panels_firmware simatic_hmi_comfort_outdoor_panels_firmware simatic_hmi_ktp_mobile_panels_ktp400f_firmware simatic_hmi_ktp_mobile_panels_ktp700_firmware simatic_hmi_kt…
|
A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15 Update 4), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (All versions < V15 Update 4), SIMATIC HMI KTP Mo…
|
CWE-22
Path Traversal
|
CVE-2018-13812
|
2024-11-21 12:48 |
2018-12-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246364
|
5.5 |
MEDIUM
Local
|
siemens
|
simatic_step_7_\(tia_portal\)
|
A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All Versions < V15.1). Password hashes with insufficient computational effort could allow an attacker to access to a project file a…
|
CWE-200
Information Exposure
|
CVE-2018-13811
|
2024-11-21 12:48 |
2018-12-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246365
|
8.1 |
HIGH
Network
|
siemens
|
simatic_it_ua_discrete_manufacturing simatic_it_production_suite simatic_it_line_monitoring_system
|
A vulnerability has been identified in SIMATIC IT LMS (All versions), SIMATIC IT Production Suite (Versions V7.1 < V7.1 Upd3), SIMATIC IT UA Discrete Manufacturing (Versions < V1.2), SIMATIC IT UA Di…
|
NVD-CWE-noinfo
|
CVE-2018-13804
|
2024-11-21 12:48 |
2018-12-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246366
|
10.0 |
CRITICAL
Network
|
siemens
|
tim_1531_irc_firmware
|
A vulnerability has been identified in TIM 1531 IRC (All version < V2.0). The devices was missing proper authentication on port 102/tcp, although configured. Successful exploitation requires an attac…
|
CWE-287
Improper Authentication
|
CVE-2018-13816
|
2024-11-21 12:48 |
2018-12-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246367
|
7.5 |
HIGH
Network
|
descor
|
infocad_fm
|
An issue was discovered in Descor Infocad FM before 3.1.0.0. An unauthenticated web service allows the retrieval of files on the web server and on reachable SMB servers.
|
CWE-287 CWE-294 CWE-522
Improper Authentication Authentication Bypass by Capture-replay Insufficiently Protected Credentials
|
CVE-2018-13789
|
2024-11-21 12:48 |
2018-10-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246368
|
8.8 |
HIGH
Network
|
siemens
|
rox_ii_firmware
|
A vulnerability has been identified in ROX II (All versions < V2.12.1). An attacker with network access to port 22/tcp and valid low-privileged user credentials for the target device could perform a …
|
CWE-269
Improper Privilege Management
|
CVE-2018-13801
|
2024-11-21 12:48 |
2018-10-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246369
|
7.5 |
HIGH
Network
|
siemens
|
simatic_et_200sp_firmware simatic_s7-1500_firmware simatic_s7-1500f_firmware
|
A vulnerability has been identified in SIMATIC ET 200SP Open Controller (All versions >= V2.0 and < V2.1.6), SIMATIC S7-1500 Software Controller (All versions >= V2.0 and < V2.5), SIMATIC S7-1500 inc…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2018-13805
|
2024-11-21 12:48 |
2018-10-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246370
|
7.2 |
HIGH
Network
|
siemens
|
rox_ii_firmware
|
A vulnerability has been identified in ROX II (All versions < V2.12.1). An authenticated attacker with a high-privileged user account access via SSH could circumvent restrictions in place and execute…
|
CWE-269
Improper Privilege Management
|
CVE-2018-13802
|
2024-11-21 12:48 |
2018-10-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|