Searching siemens software vulnerabilities

GUI overlay vulnerability in the Java API in Si

vulnerability | unauthorized | confirmation | overlaying | malicious | attackers | cellular | messages | overlay | message | Siemens | allows | phones | remote | Java | send | GUI | API | SMS | S55 |

GUI overlay vulnerability in the Java API in Siemens S55 cellular phones allows remote attackers to send unauthorized SMS messages by overlaying a confirmation message with a malicious message.


The management interface for Siemens SANTIS 50

management | interface | firmware | running | Siemens | SANTIS |

The management interface for Siemens SANTIS 50 running firmware 4.2.8.0, and possibly other products including Ericsson HN294dp and Dynalink RTA300W, allows remote attackers to access the Telnet port without authentication via certain packets to the web interface that cause the interface to freeze.


Siemens Speedstream Wireless Router 2624 allows

Speedstream | Wireless | Siemens | Router |

Siemens Speedstream Wireless Router 2624 allows local users to bypass authentication and access protected files by using the Universal Plug and Play UPnP/1.0 component.


Siemens SpeedStream 2624 allows remote attacker

SpeedStream | Siemens |

Siemens SpeedStream 2624 allows remote attackers to cause a denial of service (device hang) by sending a crafted packet to the web administrative interface.


The DBAsciiAccess CGI Script in the web interfa

Fujitsu-Siemens | DBAsciiAccess | ServerView | Computers | interface | before | Script | web | CGI |

The DBAsciiAccess CGI Script in the web interface in Fujitsu-Siemens Computers ServerView before 4.50.09 allows remote attackers to execute arbitrary commands via shell metacharacters in the Servername subparameter of the ParameterList parameter.


The web interface in Fujitsu-Siemens Computers

Fujitsu-Siemens | authentication | demonstrated | information | Computers | sensitive | attackers | accessing | interface | canceling | sub-page | PRIMERGY | contents | displays | remote | allows | obtain | Switch | dialog | field | using | Blade | BX300 | which | still | form | web |

The web interface in Fujitsu-Siemens Computers PRIMERGY BX300 Switch Blade allows remote attackers to obtain sensitive information by canceling the authentication dialog when accessing a sub-page, which still displays the form field contents of the sub-page, as demonstrated using (1) config/ip_management.htm and (2) config/snmp_config.htm.


Multiple cross-site scripting (XSS) vulnerabili

cross-site | scripting | Multiple |

Multiple cross-site scripting (XSS) vulnerabilities in the Siemens Gigaset SE361 WLAN router with firmware 1.00.0 allow remote attackers to inject arbitrary web script or HTML via the portion of the URI immediately following the filename for (1) a GIF filename, which triggers display of the GIF file in text format and an unspecified denial of service (crash); or (2) the login.tri filename, which triggers a continuous loop of the browser attempting to visit the login page.


Software vulnerabilities results 1 to 8 of 8     
Page: 1