CVE-2013-0656

Buffer overflow in a third-party ActiveX component in Siemens SIMATIC RF-MANAGER 2008, and RF-MANAGER Basic 3.0 and earlier, allows remote attackers to execute arbitrary code via a crafted web site.

Score

CVSS 2.0 6.8 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2013-01-21

Last modified

2024-09-17

Weaknesses

CWE-119

Affected products

• Simatic Rf-manager (Siemens)
• Simatic Rf-manager 2008 (Siemens)

References

• http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-099741.pdf
• http://www.us-cert.gov/control_systems/pdf/ICSA-13-014-01.pdf