CVE-2011-4512: Code Injection
CRLF injection vulnerability in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4512?
CVE-2011-4512 has a CVSS score indicating it is a medium severity vulnerability.
How do I fix CVE-2011-4512?
To fix CVE-2011-4512, you should apply the latest security patch provided by Siemens for the affected software versions.
What software is affected by CVE-2011-4512?
CVE-2011-4512 affects Siemens WinCC flexible versions 2004, 2005, 2007, 2008 and WinCC V11 prior to SP2 Update 1, as well as several SIMATIC HMI panels.
What is a CRLF injection vulnerability like CVE-2011-4512?
A CRLF injection vulnerability, such as CVE-2011-4512, allows an attacker to inject carriage return and line feed characters into an HTTP response, potentially leading to response splitting or header manipulation.
Is there a workaround for CVE-2011-4512?
There is no published workaround for CVE-2011-4512; the recommended action is to update to a secure version.