CVE-2013-0659 Code injection in n/a
Remote attackers can execute arbitrary code on Siemens CP 1604/1616 interface cards via crafted UDP packets exploiting a debugging feature.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2013-0659?
CVE-2013-0659 is a critical code injection vulnerability in n/a, published on 29 Mar 2013. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The debugging feature on the Siemens CP 1604 and CP 1616 interface cards with firmware before 2.5.2 allows remote attackers to execute arbitrary code via a crafted packet to UDP port 17185.
Which versions are affected by CVE-2013-0659?
It affects 4 products.
Products include Siemens Cp 1604, Siemens Cp 1604 Firmware, Siemens Cp 1616, Siemens Cp 1616 Firmware.
How do I fix CVE-2013-0659?
No fix has been published for CVE-2013-0659 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2013-0659 being exploited?
There is no known exploitation of CVE-2013-0659 in the wild and no public exploit code.
Sources
Also known as GHSA-qqx7-v8vx-v9c2.