Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The XPath functionality in unspecified web applications in Siemens WinCC 7.0 SP3 before Update 2 does not properly handle special characters in parameters, which allows remote authenticated users to read or modify settings via a crafted URL, related to an "XML injection" attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Siemens WinCC安全漏洞
Vulnerability Description
WinCC flexible是用在一些机器或流程应用中的人机接口。 Siemens WinCC Update 2之前的7.0 SP3版本中的未明web应用程序中的XPath功能中存在漏洞，该漏洞源于未正确处理参数中的特殊字符。远程认证用户可利用该漏洞借助特制URL，读取或修改设置。该漏洞与‘XML注入’攻击相关。
CVSS Information
N/A
Vulnerability Type
N/A