CRLF Injection Vulnerability in Siemens WinCC HMI Web Application
CVE-2013-0670

Currently unrated

Key Information:

Vendor: Siemens
Status: Wincc Tia Portal
Vendor: CVE Published:; 21 March 2013

What is CVE-2013-0670?

The CRLF injection vulnerability in the HMI web application of Siemens WinCC (TIA Portal) 11 enables remote attackers to inject arbitrary HTTP headers, potentially leading to HTTP response splitting attacks. By crafting a specific URL, an attacker could manipulate the HTTP response, which may result in the execution of unauthorized actions or the exposure of sensitive information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch