CVEvulnerability
CVE-2013-0675
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-03-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.1 MEDIUM — AV:A/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-119
Description
Buffer overflow in CCEServer (aka the central communications component) in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote attackers to cause a denial of service via a crafted packet.
Affected configurations
• siemens simatic pcs7 (<= 8.0)
• siemens simatic pcs7 7.1
• siemens wincc (<= 7.1)
• siemens wincc 5.0
• siemens wincc 6.0
• siemens wincc 7.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://ics-cert.us-cert.gov/pdf/ICSA-13-079-02.pdf US Government Resource
- http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-714398.pdf Vendor Advisory
- http://ics-cert.us-cert.gov/pdf/ICSA-13-079-02.pdf US Government Resource
- http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-714398.pdf Vendor Advisory