Skip to content
OpenAdvisories
Medium ICSA-13-079-03 7 CVEs

Siemens WinCC TIA Portal Vulnerabilities

Published Dec 22, 2013 · Updated Jun 6, 2025 · Revision 2

Vendor: Siemens Product: WinCC (TIA Portal) V11

Vulnerabilities 7

  • Unscored —
    CVE-2011-4515

    Siemens WinCC (TIA Portal) 11 uses a reversible algorithm for storing HMI web-application passwords in world-readable a…

  • Unscored —
    CVE-2013-0667

    Cross-site scripting (XSS) vulnerability in the HMI web application in Siemens WinCC (TIA Portal) 11 allows remote atta…

  • Unscored —
    CVE-2013-0668

    Multiple cross-site scripting (XSS) vulnerabilities in the HMI web application in Siemens WinCC (TIA Portal) 11 allow r…

  • Unscored —
    CVE-2013-0669

    The HMI web application in Siemens WinCC (TIA Portal) 11 allows remote authenticated users to cause a denial of service…

  • Unscored —
    CVE-2013-0670

    CRLF injection vulnerability in the HMI web application in Siemens WinCC (TIA Portal) 11 allows remote attackers to inj…

  • Unscored —
    CVE-2013-0671

    Directory traversal vulnerability in Siemens WinCC (TIA Portal) 11 allows remote authenticated users to read HMI web-ap…

  • Unscored —
    CVE-2013-0672

    Cross-site scripting (XSS) vulnerability in the HMI web application in Siemens WinCC (TIA Portal) 11 allows remote auth…

Revision history

  1. #2

    Advisory converted into a CSAF

  2. #1

    Initial Publication

References