What is the severity of CVE-2011-4510?

CVE-2011-4510 has a moderate severity rating due to its potential for cross-site scripting attacks.

How do I fix CVE-2011-4510?

To fix CVE-2011-4510, you need to apply the latest patches or updates provided by Siemens for affected versions of WinCC flexible and WinCC.

What versions are affected by CVE-2011-4510?

CVE-2011-4510 affects Siemens WinCC flexible versions 2004 to 2008 and WinCC V11 prior to SP2 Update 1.

Can CVE-2011-4510 be exploited remotely?

Yes, CVE-2011-4510 can be exploited remotely, allowing attackers to execute scripts in the context of the affected web server.

Is it safe to use Siemens WinCC flexible versions prior to SP3 if not patched for CVE-2011-4510?

Using Siemens WinCC flexible versions prior to SP3 without patching for CVE-2011-4510 poses a security risk and should be avoided.

Vulnerability/
CVE-2011-4510

medium

4.3

CWE

3/2/2012

16/9/2024

CVE-2011-4510: XSS

First published: Fri Feb 03 2012(Updated: )

Cross-site scripting (XSS) vulnerability in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-4511.

Credit: cret@cert.org

Affected Software	Affected Version	How to fix
Siemens SIMATIC WinCC flexible 2008	=2004
Siemens SIMATIC WinCC flexible 2008	=2008
Siemens SIMATIC WinCC flexible 2008	=2008-sp1
Siemens SIMATIC WinCC flexible 2008	=2008-sp2
Siemens SIMATIC WinCC flexible 2008	=2007
Siemens SIMATIC WinCC flexible 2008	=2005
Siemens WinCC	=v11
Siemens WinCC	=v11-sp1
Siemens WinCC	<=v11
Siemens SIMATIC HMI Panels	=tp
Siemens SIMATIC HMI Panels	=op
Siemens SIMATIC HMI Panels	=mobile_panels
Siemens SIMATIC HMI Panels	=comfort_panels
Siemens SIMATIC HMI Panels	=mp
Siemens SIMATIC WinCC Runtime Advanced	=v11
Siemens SIMATIC WinCC flexible Runtime

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2011-4510?
CVE-2011-4510 has a moderate severity rating due to its potential for cross-site scripting attacks.
How do I fix CVE-2011-4510?
To fix CVE-2011-4510, you need to apply the latest patches or updates provided by Siemens for affected versions of WinCC flexible and WinCC.
What versions are affected by CVE-2011-4510?
CVE-2011-4510 affects Siemens WinCC flexible versions 2004 to 2008 and WinCC V11 prior to SP2 Update 1.
Can CVE-2011-4510 be exploited remotely?
Yes, CVE-2011-4510 can be exploited remotely, allowing attackers to execute scripts in the context of the affected web server.
Is it safe to use Siemens WinCC flexible versions prior to SP3 if not patched for CVE-2011-4510?
Using Siemens WinCC flexible versions prior to SP3 without patching for CVE-2011-4510 poses a security risk and should be avoided.

agent/references
agent/type
agent/author
agent/severity
agent/description
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/first-publish-date
agent/event
agent/source
agent/weakness
agent/tags
agent/softwarecombine
collector/nvd-historical
agent/software-canonical-lookup-request
collector/nvd-index
vendor/siemens
canonical/siemens simatic wincc flexible 2008
version/siemens simatic wincc flexible 2008/2004
version/siemens simatic wincc flexible 2008/2008
version/siemens simatic wincc flexible 2008/2008-sp1
version/siemens simatic wincc flexible 2008/2008-sp2
version/siemens simatic wincc flexible 2008/2007
version/siemens simatic wincc flexible 2008/2005
canonical/siemens wincc
version/siemens wincc/v11
version/siemens wincc/v11-sp1
canonical/siemens simatic hmi panels
version/siemens simatic hmi panels/tp
version/siemens simatic hmi panels/op
version/siemens simatic hmi panels/mobile_panels
version/siemens simatic hmi panels/comfort_panels
version/siemens simatic hmi panels/mp
canonical/siemens simatic wincc runtime advanced
version/siemens simatic wincc runtime advanced/v11
canonical/siemens simatic wincc flexible runtime

Frequently Asked Questions

What is the severity of CVE-2011-4510?
CVE-2011-4510 has a moderate severity rating due to its potential for cross-site scripting attacks.
How do I fix CVE-2011-4510?
To fix CVE-2011-4510, you need to apply the latest patches or updates provided by Siemens for affected versions of WinCC flexible and WinCC.
What versions are affected by CVE-2011-4510?
CVE-2011-4510 affects Siemens WinCC flexible versions 2004 to 2008 and WinCC V11 prior to SP2 Update 1.
Can CVE-2011-4510 be exploited remotely?
Yes, CVE-2011-4510 can be exploited remotely, allowing attackers to execute scripts in the context of the affected web server.
Is it safe to use Siemens WinCC flexible versions prior to SP3 if not patched for CVE-2011-4510?
Using Siemens WinCC flexible versions prior to SP3 without patching for CVE-2011-4510 poses a security risk and should be avoided.

CVE-2011-4510: XSS

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2011-4510?

How do I fix CVE-2011-4510?

What versions are affected by CVE-2011-4510?

Can CVE-2011-4510 be exploited remotely?

Is it safe to use Siemens WinCC flexible versions prior to SP3 if not patched for CVE-2011-4510?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2011-4510?

How do I fix CVE-2011-4510?

What versions are affected by CVE-2011-4510?

Can CVE-2011-4510 be exploited remotely?

Is it safe to use Siemens WinCC flexible versions prior to SP3 if not patched for CVE-2011-4510?