Aleksandr Tlyapov

The software contains a directory traversal flaw. A remote attacker can exploit this by sending specially crafted URL requests containing "dot dot" sequences (`../`) to view, overwrite, or append to arbitrary files on the system. The vulnerability allows manipulation of URL requests to traverse directories, potentially enabling unauthorized access to files within the server’s filesystem.

The software potentially allows a remote attacker to access files on the system outside of the intended directories. This is achieved by sending a crafted URL request that includes "dot dot" sequences (/../). The request can be sent to an API endpoint, allowing access to arbitrary files. The vulnerable parameter is the URL itself.

IBM Tivoli Monitoring is susceptible to a heap-based buffer overflow due to insufficient bounds checking. A remote attacker could exploit this issue to overflow a buffer, potentially leading to arbitrary code execution or server crashes.

IBM Tivoli Monitoring is susceptible to a heap-based buffer overflow due to insufficient bounds checking. A remote attacker could exploit this issue to overflow a buffer, potentially leading to arbitrary code execution or a server crash.

The issue allows a remote attacker to execute arbitrary code due to improper validation of an index value of a dynamically allocated array. This can be exploited without authentication.

The issue concerns the remote-management module in certain Siemens products, where credentials are not properly encrypted in transit. This makes it easier for remote attackers to determine cleartext credentials by sniffing the network and conducting a decryption attack.

The issue is caused by a stack buffer overflow in the server management mechanism. This allows a remote attacker to potentially execute arbitrary code, gain privileges, or cause a denial of service. The vulnerability can be exploited remotely.

The issue affects the availability of the system, related to SISNAPI and Network Infrastructure.

The issue exists due to different behavior for NetBIOS user names in the Web Navigator component of Siemens WinCC, depending on whether a user account exists. This allows remote authenticated users to enumerate account names by using specially crafted URL parameters.

The issue exists in the login implementation of the Web Navigator in Siemens WinCC due to a hardcoded account. This allows remote attackers to gain access to the system using a special request.

The issue concerns a hardcoded encryption key in the Project administration application. This allows remote attackers to obtain sensitive information by extracting the key from another product installation and then using it to sniff network traffic on TCP port 1030. The vulnerability can be exploited to elevate privileges in the WinCC Project Administration application, given that an attacker can intercept data transmitted by an authorized user over the network through port 1030/tcp.

The issue allows a local user to gain limited elevated privileges of the operating system user by leveraging weak system-object access control. This could potentially be exploited to gain increased access to system resources.

The issue is related to an error that occurs when processing a specially crafted HTTP packet, allowing an unauthenticated attacker to gain access to confidential information by sending a specially crafted HTTP request to ports 80/tcp and 443/tcp. This can be achieved through the WebNavigator server, which allows remote attackers to obtain sensitive information via an HTTP request.

The issue allows remote authenticated users to gain privileges. This can be achieved via an HTTP or HTTPS request. The vulnerability is related to errors in the code of the WinCC WebNavigator server.