[Forgot Password]
Login  Register Subscribe

23631

 
 

126995

 
 

100182

 
 

909

 
 

80198

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2012-3028

Date: (C)2012-09-18   (M)2015-12-16 


Cross-site request forgery (CSRF) vulnerability in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to hijack the authentication of arbitrary users for requests that modify data or cause a denial of service.

CVSS Score: 6.8Access Vector: NETWORK
Exploit Score: 8.6Access Complexity: MEDIUM
Impact Score: 6.4Authentication: NONE
 Confidentiality: PARTIAL
 Integrity: PARTIAL
 Availability: PARTIAL





Reference:
http://en.securitylab.ru/lab/PT-2012-42
http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-864051.pdf
http://www.us-cert.gov/control_systems/pdf/ICSA-12-256-01.pdf

CPE    11
cpe:/a:siemens:wincc:6.0:sp4
cpe:/a:siemens:wincc:6.0:sp3
cpe:/a:siemens:wincc:6.0:sp2
cpe:/a:siemens:wincc:5.0
...
CWE    1
CWE-352

© 2013 SecPod Technologies