VYPR

Simatic Wincc Oa

by Siemens Foundation

CVEs (42)

  • CVE-2014-1697Feb 7, 2014
    risk 0.00cvss —epss 0.05

    The integrated web server in Siemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to execute arbitrary code via crafted packets to TCP port 4999.

  • CVE-2014-1696Feb 7, 2014
    risk 0.00cvss —epss 0.02

    Siemens SIMATIC WinCC OA before 3.12 P002 January uses a weak hash algorithm for passwords, which makes it easier for remote attackers to obtain access via a brute-force attack.

Page 3 of 3