CVE-2011-4879
High
Description
miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime does not properly handle URIs beginning with a 0xfa character, which allows remote attackers to read data from arbitrary memory locations or cause a denial of service (application crash) via a crafted POST request.
SeverityHigh
CVSS8.5
Exploit probability—
ProductSiemens Wincc Flexible
PublishedFeb 3, 2012
First seenFeb 3, 2012
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens wincc_flexible | 2004, 2005, 2007, 2008 | — |
| siemens wincc | v ≤ v11, v11 | — |
| siemens simatic_hmi_panels | comfort_panels, mobile_panels, mp, op, tp | — |
| siemens wincc_runtime_advanced | v11 | — |
| siemens wincc_flexible_runtime | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.