https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 06:59:17 +0000 https://cve.radiocsirt.org/vuln/certfr-2018-avi-543 certfr-2018-avi-543 https://cve.radiocsirt.org/vuln/certfr-2018-avi-543 https://cve.radiocsirt.org/vuln/euvd-2026-66767 EUVD-2026-66767 https://cve.radiocsirt.org/vuln/euvd-2026-66767 https://cve.radiocsirt.org/vuln/fkie_cve-2018-13812 <p>A vulnerability has been identified in SIMATIC HMI Comfort Panels 4&#34; - 22&#34; (All versions &lt; V15 Update 4), SIMATIC HMI Comfort Outdoor Panels 7&#34; &amp; 15&#34; (All versions &lt; V15 Update 4), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions &lt; V15 Update 4), SIMATIC WinCC Runtime Advanced (All versions &lt; V15 Update 4), SIMATIC WinCC Runtime Professional (All versions &lt; V15 Update 4), SIMATIC WinCC (TIA Portal) (All versions &lt; V15 Update 4), SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel) (All versions). A directory traversal vulnerability could allow to download arbitrary files from the device. The security vulnerability could be exploited by an attacker with network access to the integrated web server. No user interaction and no authentication is required to exploit the vulnerability. The vulnerability impacts the confidentiality of the device. At the time of advisory publication no public exploitation of this security vulnerability was known.</p> <p>A vulnerability has been identified in SIMATIC HMI Comfort Panels 4&#34; - 22&#34; (All versions &lt; V15 Update 4), SIMATIC HMI Comfort Outdoor Panels 7&#34; &amp; 15&#34; (All versions &lt; V15 Update 4), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions &lt; V15 Update 4), SIMATIC WinCC Runtime Advanced (All versions &lt; V15 Update 4), SIMATIC WinCC Runtime Professional (All versions &lt; V15 Update 4), SIMATIC WinCC (TIA Portal) (All versions &lt; V15 Update 4), SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel) (All versions). A directory traversal vulnerability could allow to download arbitrary files from the device. The security vulnerability could be exploited by an attacker with network access to the integrated web server. No user interaction and no authentication is required to exploit the vulnerability. The vulnerability impacts the confidentiality of the device. At the time of advisory publication no public exploitation of this security vulnerability was known.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-13812 https://cve.radiocsirt.org/vuln/ghsa-v99p-r9xp-cghh <p>A vulnerability has been identified in SIMATIC HMI Comfort Panels 4&#34; - 22&#34; (All versions &lt; V15 Update 4), SIMATIC HMI Comfort Outdoor Panels 7&#34; &amp; 15&#34; (All versions &lt; V15 Update 4), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions &lt; V15 Update 4), SIMATIC WinCC Runtime Advanced (All versions &lt; V15 Update 4), SIMATIC WinCC Runtime Professional (All versions &lt; V15 Update 4), SIMATIC WinCC (TIA Portal) (All versions &lt; V15 Update 4), SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel) (All versions). A directory traversal vulnerability could allow to download arbitrary files from the device. The security vulnerability could be exploited by an attacker with network access to the integrated web server. No user interaction and no authentication is required to exploit the vulnerability. The vulnerability impacts the confidentiality of the device. At the time of advisory publication no public exploitation of this security vulnerability was known.</p> <p>A vulnerability has been identified in SIMATIC HMI Comfort Panels 4&#34; - 22&#34; (All versions &lt; V15 Update 4), SIMATIC HMI Comfort Outdoor Panels 7&#34; &amp; 15&#34; (All versions &lt; V15 Update 4), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions &lt; V15 Update 4), SIMATIC WinCC Runtime Advanced (All versions &lt; V15 Update 4), SIMATIC WinCC Runtime Professional (All versions &lt; V15 Update 4), SIMATIC WinCC (TIA Portal) (All versions &lt; V15 Update 4), SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel) (All versions). A directory traversal vulnerability could allow to download arbitrary files from the device. The security vulnerability could be exploited by an attacker with network access to the integrated web server. No user interaction and no authentication is required to exploit the vulnerability. The vulnerability impacts the confidentiality of the device. At the time of advisory publication no public exploitation of this security vulnerability was known.</p> https://cve.radiocsirt.org/vuln/ghsa-v99p-r9xp-cghh https://cve.radiocsirt.org/vuln/gsd-2018-13812 gsd-2018-13812 https://cve.radiocsirt.org/vuln/gsd-2018-13812 https://cve.radiocsirt.org/vuln/icsa-18-317-08 <p>A directory traversal vulnerability could allow to download arbitrary files from the device. The security vulnerability could be exploited by an attacker with network access to the integrated web server. No user interaction and no authenitcation is required to exploit the vulnerability. The vulnerability impacts the confidentiality of the device. At the time of advisory publication no public exploitation of this security vulnerability was known. A directory traversal vulnerability could allow to download arbitrary files from the device. The security vulnerability could be exploited by an attacker with network access to the integrated web server. No user interaction and no authenitcation is required to exploit the vulnerability. The vulnerability impacts the confidentiality of the device. At the time of advisory publication no public exploitation of this security vulnerability was known.</p> <p>A directory traversal vulnerability could allow to download arbitrary files from the device. The security vulnerability could be exploited by an attacker with network access to the integrated web server. No user interaction and no authenitcation is required to exploit the vulnerability. The vulnerability impacts the confidentiality of the device. At the time of advisory publication no public exploitation of this security vulnerability was known. A directory traversal vulnerability could allow to download arbitrary files from the device. The security vulnerability could be exploited by an attacker with network access to the integrated web server. No user interaction and no authenitcation is required to exploit the vulnerability. The vulnerability impacts the confidentiality of the device. At the time of advisory publication no public exploitation of this security vulnerability was known.</p> https://cve.radiocsirt.org/vuln/icsa-18-317-08