CVE-2013-0675

2013-03-2115:00:00

icscert

www.cve.org

buffer overflow

siemens wincc

denial of service

remote attackers

AI Score

6.8

Confidence

High

EPSS

0.002

Percentile

58.1%

JSON

Buffer overflow in CCEServer (aka the central communications component) in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote attackers to cause a denial of service via a crafted packet.

References

ics-cert.us-cert.gov/pdf/ICSA-13-079-02.pdf

www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-714398.pdf