Denial of Service Vulnerability in Siemens WinCC Flexible and SIMATIC HMI Panels

CVE-2011-4877

Summary

The HmiLoad function in the runtime loader of Siemens' WinCC flexible versions and SIMATIC HMI panels is vulnerable due to mishandling of crafted data over TCP while Transfer Mode is enabled. This flaw can be exploited by remote attackers, leading to an application crash and service disruption, which poses significant risks to operational reliability and security in environments relying on these systems.

References