Simatic Hmi Panels
Approved changes feed: RSS · Atom
cpe:2.3:a:siemens:simatic_hmi_panels:op:*:*:*:*:*:*:*
part: a version: op update: *
| Vendor | Siemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f) |
|---|---|
| Product | Simatic Hmi Panels (d5a3d67e-c74e-5f7f-bdfc-d4df7555d53f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-4879 |
vulnerable | 2026-06-08 04:59:33.416135 |
Details available
miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime does not properly handle URIs beginning with a 0xfa character, which allows remote attackers to read data from arbitrary memory locations or cause a denial of service (application crash) via a crafted POST request.
Published: 2012-02-03T20:00:00.000Z
Updated: 2024-08-07T00:16:35.211Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4878 |
vulnerable | 2026-06-08 04:59:33.415207 |
Details available
Directory traversal vulnerability in miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allows remote attackers to read arbitrary files via a ..%5c (dot dot backslash) in a URI.
Published: 2012-02-03T20:00:00.000Z
Updated: 2024-08-07T00:16:35.129Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4877 |
vulnerable | 2026-06-08 04:59:33.414516 |
Details available
HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is enabled, allows remote attackers to cause a denial of service (application crash) by sending crafted data over TCP.
Published: 2012-02-03T20:00:00.000Z
Updated: 2024-08-07T00:16:35.178Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4876 |
vulnerable | 2026-06-08 04:59:33.413891 |
Details available
Directory traversal vulnerability in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is enabled, allows remote attackers to execute, read, create, modify, or delete arbitrary files via a .. (dot dot) in a string.
Published: 2012-02-03T20:00:00.000Z
Updated: 2024-08-07T00:16:35.056Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4875 |
vulnerable | 2026-06-08 04:59:33.413248 |
Details available
Stack-based buffer overflow in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is enabled, allows remote attackers to execute arbitrary code via vectors related to Unicode strings.
Published: 2012-02-03T20:00:00.000Z
Updated: 2024-08-07T00:16:35.128Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4514 |
vulnerable | 2026-06-08 04:59:31.671198 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4513 |
vulnerable | 2026-06-08 04:59:31.670667 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4512 |
vulnerable | 2026-06-08 04:59:31.670126 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4511 |
vulnerable | 2026-06-08 04:59:31.669480 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4510 |
vulnerable | 2026-06-08 04:59:31.668753 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4509 |
vulnerable | 2026-06-08 04:59:31.668093 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4508 |
vulnerable | 2026-06-08 04:59:31.665448 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.