Security Advisory

CVE-2016-8672

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2016-11-23 11:00:00

Last updated 2024-08-06 02:27:41

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

A vulnerability has been identified in SIMATIC CP 343-1 Advanced (incl. SIPLUS NET variant) (All versions < V3.0.53), SIMATIC CP 443-1 Advanced (incl. SIPLUS NET variant) (All versions < V3.2.17), SIMATIC S7-300 PN/DP CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP CPU family (incl. SIPLUS variants) (All versions). The integrated web server delivers cookies without the "secure" flag. Modern browsers interpreting the flag would mitigate potential data leakage in case of clear text transmission.

← Browse all CVEs View on cve.org ↗