Aleksandr Timorin

**Name of the Vulnerable Software and Affected Versions** IniNet Solutions GmbH's SCADA Web Server versions prior to 2.02 IniNet embeddedWebServer (aka eWebServer) versions prior to 2.02 **Description** The issue is caused by multiple stack-based buffer overflows in the IniNet embeddedWebServer. Exploitation of these issues may allow a remote attacker to execute arbitrary code via a long field in an HTTP request. **Recommendations** For versions prior to 2.02, update to version 2.02 or later to resolve the issue. As a temporary workaround, consider restricting access to the HTTP request field to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** IniNet embeddedWebServer (aka eWebServer) versions prior to 2.02 **Description** The issue allows context-dependent attackers to obtain sensitive information due to the use of cleartext for password storage. **Recommendations** For versions prior to 2.02, update to version 2.02 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** IniNet embeddedWebServer (aka eWebServer) versions prior to 2.02 **Description** The issue arises from the mishandling of URL encoding, allowing remote attackers to write to or delete files by using a crafted string. **Recommendations** For versions prior to 2.02, update to version 2.02 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Siemens SIMATIC STEP 7 (TIA Portal) versions prior to 13 SP1 **Description** The issue allows remote attackers to establish arbitrary authorization data by modifying project files that lack integrity protection, which determines a user's privileges. **Recommendations** For versions prior to 13 SP1, update to version 13 SP1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Siemens SIMATIC STEP 7 (TIA Portal) versions prior to 13 SP1 **Description** The issue allows local users to determine cleartext passwords by reading a project file and conducting a brute-force attack due to the use of a weak password-hash algorithm. **Recommendations** For versions prior to 13 SP1, update to version 13 SP1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Siemens SIMATIC S7-1200 CPU PLC devices with firmware prior to 4.0 **Description** The issue allows remote attackers to cause a denial of service, resulting in the device transitioning to defect mode, which lasts until a hardware reset is performed. This is achieved by sending specially crafted PROFINET packets. **Recommendations** For Siemens SIMATIC S7-1200 CPU PLC devices with firmware prior to 4.0, update the firmware to version 4.0 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Siemens SIMATIC S7-1500 CPU PLC devices versions prior to 1.5.0 **Description** The issue concerns the random-number generator, which lacks sufficient entropy. This weakness can be exploited by remote attackers to bypass cryptographic protection mechanisms and hijack sessions. **Recommendations** For versions prior to 1.5.0, update the firmware to version 1.5.0 or later to address the issue.

**Name of the Vulnerable Software and Affected Versions** Siemens SIMATIC S7-1500 CPU PLC devices versions prior to 1.5.0 Siemens SIMATIC S7-1200 CPU PLC devices versions prior to 4.0 **Description** A cross-site request forgery (CSRF) issue affects the software, allowing remote attackers to hijack the authentication of victims via unknown vectors. The vulnerability is also described as affecting the embedded server of the Simatic S7-1200 programmable logic controller, specifically on port 80 TCP and port 443 TCP, enabling cross-site request forgery. **Recommendations** For Siemens SIMATIC S7-1500 CPU PLC devices versions prior to 1.5.0, update the firmware to version 1.5.0 or later. For Siemens SIMATIC S7-1200 CPU PLC devices versions prior to 4.0, update the firmware to version 4.0 or later.

**Name of the Vulnerable Software and Affected Versions** Siemens SIMATIC S7-1500 CPU PLC devices versions prior to 1.5.0 **Description** The issue allows remote attackers to cause a denial of service, resulting in a defect-mode transition, by sending crafted Profinet packets. **Recommendations** For versions prior to 1.5.0, update the firmware to version 1.5.0 or later to resolve the issue.