← Back

CVE-2011-4876

nvd nist
Published: Feb 3, 2012Modified: Apr 29, 2026

JSON object

Loading...
9.3
Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 8.6 / Impact: 10.0
Source: NVD

Description

Directory traversal vulnerability in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is enabled, allows remote attackers to execute, read, create, modify, or delete arbitrary files via a .. (dot dot) in a string.

Affected (12)

Siemens
5 products
Wincc Flexible
Wincc
Simatic Hmi Panels
Wincc Runtime Advanced
Wincc Flexible Runtime
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Siemens
Wincc Flexible
Version 2004
Wincc Flexible
Version 2005
Wincc Flexible
Version 2007
Wincc Flexible
Version 2008
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Wincc
Version v11
Configuration C
5 vulnerable
Vulnerable SoftwareAffected Versions
Siemens
Simatic Hmi Panels
Version comfort_panels
Simatic Hmi Panels
Version mobile_panels
Simatic Hmi Panels
Version mp
Simatic Hmi Panels
Version op
Simatic Hmi Panels
Version tp
Configuration D
1 vulnerable
Vulnerable SoftwareAffected Versions
Wincc Runtime Advanced
Version v11
Configuration E
1 vulnerable
Vulnerable SoftwareAffected Versions
Wincc Flexible Runtime
All versions

Related CWEs

CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (18)

Source: cret@cert.org
Source: cret@cert.org
Source: cret@cert.org
Source: cret@cert.org
Source: cret@cert.org
Vendor Advisory
Source: cret@cert.org
Source: cret@cert.org
Source: cret@cert.org
US Government Resource
Source: cret@cert.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.