Gleb Gritsai

The issue allows local users to obtain sensitive information by reading a file due to the use of cleartext for project-window password storage.

A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML.

The issue allows local users to obtain sensitive information by discovering a hardcoded cleartext password used to control read access to Project files and Project Configuration files.

The issue concerns the remote-management module in certain Siemens products, where credentials are not properly encrypted in transit. This makes it easier for remote attackers to determine cleartext credentials by sniffing the network and conducting a decryption attack.

The issue is related to the incorrect storage of pre-shared keys in TIA project files. This could allow a local attacker to gain access to sensitive information, potentially by conducting a brute-force attack after obtaining access to a file.

The issue is related to the integrated web server in Siemens SIMATIC WinCC OA, which allows remote attackers to execute arbitrary code via crafted packets sent to TCP port 4999. This is due to errors that occur when processing specially formed TCP packets, enabling an attacker to exploit the issue and execute arbitrary code by sending crafted packets to the specified port.

The issue allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.