CVE-2013-0674: Buffer Overflow
Published Mar 21, 2013
·Updated
Buffer overflow in the RegReader ActiveX control in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote attackers to execute arbitrary code via a long parameter.
Affected Software
13 affected components
Siemens SIMATIC PCS7<=8.0
Siemens SIMATIC PCS7=7.1-sp3
Siemens WinCC<=7.1
Siemens WinCC=5.0
Siemens WinCC=5.0-sp1
Siemens WinCC=6.0
Siemens WinCC=6.0-sp2
Siemens WinCC=6.0-sp3
Siemens WinCC=6.0-sp4
Siemens WinCC=7.0
Siemens WinCC=7.0-sp1
Siemens WinCC=7.0-sp2
Siemens WinCC=7.0-sp3
Event History
Mar 21, 2013
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-0674?
CVE-2013-0674 is classified as critical due to its potential for remote code execution.
2
How do I fix CVE-2013-0674?
To address CVE-2013-0674, it is recommended to update Siemens WinCC and SIMATIC PCS7 to versions 7.2 or later.
3
What products are affected by CVE-2013-0674?
CVE-2013-0674 affects Siemens WinCC versions up to 7.1 and SIMATIC PCS7 versions up to 8.0.
4
Can CVE-2013-0674 be exploited remotely?
Yes, CVE-2013-0674 can be exploited by attackers remotely via a specially crafted parameter.
5
Is there a patch available for CVE-2013-0674?
Yes, Siemens has released patches with updates for affected products that address CVE-2013-0674.