CVE-2011-4509 (CRITICAL)

Vendor	Product	Version range	Fixed in
siemens	simatic_hmi_panels	—	—
siemens	simatic_hmi_panels	—	—
siemens	simatic_hmi_panels	—	—
siemens	simatic_hmi_panels	—	—
siemens	simatic_hmi_panels	—	—
siemens	wincc	—	—
siemens	wincc_flexible	—	—
siemens	wincc_flexible	—	—
siemens	wincc_flexible	—	—
siemens	wincc_flexible	—	—
siemens	wincc_runtime_advanced	—	—

GHSA

GHSA-xrjh-j238-j8p7: The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels

ghsa_unreviewed·2022-05-17

CVE-2011-4509 [HIGH] GHSA-xrjh-j238-j8p7: The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime has an improperly selected default password for the administrator account, which makes it easier for remote attackers to obtain access via a brute-force approach involving many HTTP requests.

CISA ICS

Siemens Simatic HMI Authentication Vulnerabilities

cisa_ics·2013-04-22

Siemens Simatic HMI Authentication Vulnerabilities ## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs. ICS Advisory ## Siemens Simatic HMI Authentication Vulnerabilities Last RevisedApril 22, 2013 Alert CodeICSA-11-356-01 ## Overview ICS-CERT is aware of a public report by independent security researchers Billy Rios and Terry McCorkle concerning authentication bypass vulnerabilities affecting Siemens SIMATIC HMI products which are supervisory control and data acquisition/human-machine interface (SCADA/HMI) products. According to this report, systems running affected versions of this product are accessible using a default username and password. These systems also generate an insecure authenticat

CISA ICS

Siemens SIMATIC WinCC Vulnerabilities (UPDATE A)

cisa_ics·2011-12-22

Siemens SIMATIC WinCC Vulnerabilities (UPDATE A) ## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs. ICS Advisory ## Siemens SIMATIC WinCC Vulnerabilities (UPDATE A) Last RevisedSeptember 06, 2018 Alert CodeICSA-12-030-01A ## Overview This advisory is a follow-up to a previous advisory titled “ICSA-11-356-01 – Siemens HMI Authentication Vulnerabilities” that was published December 22, 2011, and an alert titled "ICS-ALERT-11-332-02A – Siemens SIMATIC WinCC Flexible Vulnerabilities" that was published December 2, 2011. ICS-CERT has received reports from independent security researchers Billy Rios, Terry McCorkle, Shawn Merdinger, and Luigi Auriemma detailing several vulnerabilities in Siemens S

CVE-2011-4509: The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC…

Affected