medium4.3
CVE-2013-0670
CRLF injection vulnerability in the HMI web application in Siemens WinCC (TIA Portal) 11 allows remote attackers to inject arbitrary HTTP headers and conduct H…
Impact
CRLF injection vulnerability in the HMI web application in Siemens WinCC (TIA Portal) 11 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Wincc Tia Portal | Version 11.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://ics-cert.us-cert.gov/pdf/ICSA-13-079-03.pdf
- http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-212483.pdf
- http://ics-cert.us-cert.gov/pdf/ICSA-13-079-03.pdf
- http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-212483.pdf