CVE-2013-0674: Buffer Overflow
First published: Thu Mar 21 2013(Updated: )
Buffer overflow in the RegReader ActiveX control in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote attackers to execute arbitrary code via a long parameter.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Siemens SIMATIC PCS 7 | <=8.0 | |
| Siemens SIMATIC PCS 7 | =7.1-sp3 | |
| Siemens WinCC | <=7.1 | |
| Siemens WinCC | =5.0 | |
| Siemens WinCC | =5.0-sp1 | |
| Siemens WinCC | =6.0 | |
| Siemens WinCC | =6.0-sp2 | |
| Siemens WinCC | =6.0-sp3 | |
| Siemens WinCC | =6.0-sp4 | |
| Siemens WinCC | =7.0 | |
| Siemens WinCC | =7.0-sp1 | |
| Siemens WinCC | =7.0-sp2 | |
| Siemens WinCC | =7.0-sp3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2013-0674?
CVE-2013-0674 is classified as critical due to its potential for remote code execution.
How do I fix CVE-2013-0674?
To address CVE-2013-0674, it is recommended to update Siemens WinCC and SIMATIC PCS7 to versions 7.2 or later.
What products are affected by CVE-2013-0674?
CVE-2013-0674 affects Siemens WinCC versions up to 7.1 and SIMATIC PCS7 versions up to 8.0.
Can CVE-2013-0674 be exploited remotely?
Yes, CVE-2013-0674 can be exploited by attackers remotely via a specially crafted parameter.
Is there a patch available for CVE-2013-0674?
Yes, Siemens has released patches with updates for affected products that address CVE-2013-0674.
- agent/references
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/author
- agent/description
- agent/event
- agent/source
- agent/weakness
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/siemens
- canonical/siemens simatic pcs 7
- version/siemens simatic pcs 7/8.0
- version/siemens simatic pcs 7/7.1-sp3
- canonical/siemens simatic wincc
- version/siemens simatic wincc/7.1
- version/siemens simatic wincc/5.0
- version/siemens simatic wincc/5.0-sp1
- version/siemens simatic wincc/6.0
- version/siemens simatic wincc/6.0-sp2
- version/siemens simatic wincc/6.0-sp3
- version/siemens simatic wincc/6.0-sp4
- version/siemens simatic wincc/7.0
- version/siemens simatic wincc/7.0-sp1
- version/siemens simatic wincc/7.0-sp2
- version/siemens simatic wincc/7.0-sp3