Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V14), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (All versions < V14), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V14), SIMATIC WinCC Runtime Advanced (All versions < V14), SIMATIC WinCC Runtime Professional (All versions < V14), SIMATIC WinCC (TIA Portal) (All versions < V14), SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel) (All versions). The integrated web server (port 80/tcp and port 443/tcp) of the affected devices could allow an attacker to inject HTTP headers. An attacker must trick a valid user who is authenticated to the device into clicking on a malicious link to exploit the vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS Information
N/A
Vulnerability Type
HTTP头部中CRLF序列转义处理不恰当(HTTP响应分割)
Vulnerability Title
Siemens SIMATIC Panels和SIMATIC WinCC 代码注入漏洞
Vulnerability Description
Siemens SIMATIC Panels和SIMATIC WinCC（TIA Portal）都是德国西门子（Siemens）公司的产品。Siemens SIMATIC Panels是一款人机界面面板。SIMATIC WinCC是一套自动化的数据采集与监控（SCADA）系统。 Siemens SIMATIC Panels和SIMATIC WinCC (TIA Portal)中存在代码注入漏洞。攻击者可借助恶意的链接利用该漏洞注入HTTP包头。以下产品和版本受到影响：Siemens SIMATIC HMI
CVSS Information
N/A
Vulnerability Type
N/A