CVEvulnerability
CVE-2013-4912
5.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-08-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-20
Description
Open redirect vulnerability in Siemens WinCC (TIA Portal) 11 and 12 before 12 SP1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks by leveraging improper configuration of SIMATIC HMI panels by the WinCC product.
Affected configurations
• siemens wincc 11.0
• siemens wincc 12.0
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://scadastrangelove.blogspot.com/2013/08/ssa-064884-wincctia-portal-fixes.html scadastrangelove.blogspot.com
- http://secunia.com/advisories/54051 secunia.com
- http://secunia.com/advisories/54252 secunia.com
- http://www.securityfocus.com/bid/61535 www.securityfocus.com
- http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-064884.pdf Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86100 exchange.xforce.ibmcloud.com
- https://ics-cert.us-cert.gov/advisories/ICSA-13-213-02 ics-cert.us-cert.gov
- http://scadastrangelove.blogspot.com/2013/08/ssa-064884-wincctia-portal-fixes.html scadastrangelove.blogspot.com
- http://secunia.com/advisories/54051 secunia.com
- http://secunia.com/advisories/54252 secunia.com
- http://www.securityfocus.com/bid/61535 www.securityfocus.com
- http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-064884.pdf Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86100 exchange.xforce.ibmcloud.com
- https://ics-cert.us-cert.gov/advisories/ICSA-13-213-02 ics-cert.us-cert.gov