CRLF injection vulnerability in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: certcc

Published:

Updated: 2024-09-16T18:09:01.418Z

Reserved: 2011-11-22T00:00:00Z

Link: CVE-2011-4512

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2012-02-03T20:55:01.453

Modified: 2025-04-11T00:51:21.963

Link: CVE-2011-4512

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.