PT-2012-4123

CVE-2012-2595

Published

2012-06-08

Updated

2012-06-12

Description by

CVSS 2.0

4.3

Medium

MetricsAV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Siemens WinCC version 7.0 SP3 before Update 2

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities in unspecified web applications. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via vectors involving special characters in parameters.

Recommendations For Siemens WinCC version 7.0 SP3 before Update 2, apply Update 2 to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Dmitry Serebryannikov

Sergey Bobrov

Sergey Shcherbel