3/2/2012
3/10/2022
7/8/2024
CVE-2011-4511: XSS
First published: Fri Feb 03 2012(Updated: )
Cross-site scripting (XSS) vulnerability in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-4510.
Credit: cret@cert.org
Affected Software | Affected Version | How to fix |
---|
Siemens WinCC flexible | =2004 | |
Siemens WinCC flexible | =2008 | |
Siemens WinCC flexible | =2008-sp1 | |
Siemens WinCC flexible | =2008-sp2 | |
Siemens WinCC flexible | =2007 | |
Siemens WinCC flexible | =2005 | |
Siemens WinCC | =v11 | |
Siemens WinCC | =v11-sp1 | |
Siemens WinCC | <=v11 | |
Siemens Simatic Hmi Panels | =tp | |
Siemens Simatic Hmi Panels | =op | |
Siemens Simatic Hmi Panels | =mobile_panels | |
Siemens Simatic Hmi Panels | =comfort_panels | |
Siemens Simatic Hmi Panels | =mp | |
Siemens Wincc Runtime Advanced | =v11 | |
Siemens Wincc Flexible Runtime | | |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
- collector/nvd-historical
- collector/nvd-index
- agent/weakness
- agent/references
- agent/author
- agent/severity
- agent/description
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- agent/event
- agent/type
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/siemens
- canonical/siemens wincc flexible
- version/siemens wincc flexible/2004
- version/siemens wincc flexible/2008
- version/siemens wincc flexible/2008-sp1
- version/siemens wincc flexible/2008-sp2
- version/siemens wincc flexible/2007
- version/siemens wincc flexible/2005
- canonical/siemens wincc
- version/siemens wincc/v11
- version/siemens wincc/v11-sp1
- canonical/siemens simatic hmi panels
- version/siemens simatic hmi panels/tp
- version/siemens simatic hmi panels/op
- version/siemens simatic hmi panels/mobile_panels
- version/siemens simatic hmi panels/comfort_panels
- version/siemens simatic hmi panels/mp
- canonical/siemens wincc runtime advanced
- version/siemens wincc runtime advanced/v11
- canonical/siemens wincc flexible runtime
Contact
SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.coBy using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203