← Back

CVE-2013-0674

nvd nist
Published: Mar 21, 2013Modified: Apr 29, 2026

JSON object

Loading...
6.8
Vector
AV:N/AC:M/Au:N/C:P/I:P/A:P
Exploitability: 8.6 / Impact: 6.4
Source: NVD

Description

Buffer overflow in the RegReader ActiveX control in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote attackers to execute arbitrary code via a long parameter.

Affected (13)

Siemens
2 products
Simatic Pcs7
Wincc
Configuration A
13 vulnerable
Vulnerable SoftwareAffected Versions
Siemens
Simatic Pcs7
Up to 8.0
Simatic Pcs7
Version 7.1 sp3
Siemens
Wincc
Up to 7.1
Wincc
Version 5.0
Wincc
Version 5.0 sp1
Wincc
Version 6.0
Wincc
Version 6.0 sp2
Wincc
Version 6.0 sp3
Wincc
Version 6.0 sp4
Wincc
Version 7.0
Wincc
Version 7.0 sp1
Wincc
Version 7.0 sp2
Wincc
Version 7.0 sp3

Related CWEs

CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (4)

Source: ics-cert@hq.dhs.gov
US Government Resource
Source: ics-cert@hq.dhs.gov
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.