Skip to content
OpenAdvisories
Unscored CVE-2012-2596 EUVD-2012-2582GHSA-8h44-xxg3-9447

The XPath functionality in unspecified web applications in Siemens WinCC 7.0 SP3 before Update 2 does not properly handle special character…

Published Jun 8, 2012 · Updated Sep 17, 2024 · Assigned by certcc

Description

The XPath functionality in unspecified web applications in Siemens WinCC 7.0 SP3 before Update 2 does not properly handle special characters in parameters, which allows remote authenticated users to read or modify settings via a crafted URL, related to an "XML injection" attack.

Advisories 1

References