CVE-2013-0677 Information

Description

The web server in Siemens WinCC before 7.2 as used in SIMATIC PCS7 before 8.0 SP1 and other products allows remote attackers to obtain sensitive information or cause a denial of service via a crafted project file.

Reference

http://ics-cert.us-cert.gov/pdf/ICSA-13-079-02.pdf http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-714398.pdf