[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fnI8R05KRWDsebeDRSNkPx2FR7CByYqbmhqtq_fsDsks":3,"g5a-risk:CVE-2011-4508":194},{"success":4,"data":5,"meta":192},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":81,"references":82,"referencesCount":97,"weaknesses":98,"weaknessesCount":106,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":107,"seoMetadata":108,"configurations":133,"relatedVendorCves":190,"notableEvents":191},"CVE-2011-4508","What is CVE-2011-4508?","The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime generates predictable authentication tokens for cookies, which makes it easier for remote attackers to bypass authentication via a crafted cookie.","The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort P...","2012-02-03T20:55:01.25","2026-06-16T23:34:57.603",9.3,"AV:N\u002FAC:M\u002FAu:N\u002FC:C\u002FI:C\u002FA:C",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":32,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":32,"UserInteractionRequired":32},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","MEDIUM","NONE","COMPLETE","",null,"HIGH",8.6,10,false,[],0.02979,[34,34,34,34,34,34,34],"Critical",[38,43,46,49,52,56,59,63,66,69,72,75,78],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"siemens","wincc_flexible","2004","cpe:2.3:a:siemens:wincc_flexible:2004:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":44,"criteria":45,"vulnerable":4},"2005","cpe:2.3:a:siemens:wincc_flexible:2005:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":47,"criteria":48,"vulnerable":4},"2007","cpe:2.3:a:siemens:wincc_flexible:2007:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":50,"criteria":51,"vulnerable":4},"2008","cpe:2.3:a:siemens:wincc_flexible:2008:*:*:*:*:*:*:*",{"vendor":39,"product":53,"version":54,"criteria":55,"vulnerable":4},"wincc","*","cpe:2.3:a:siemens:wincc:*:sp2:*:*:*:*:*:*",{"vendor":39,"product":53,"version":57,"criteria":58,"vulnerable":4},"v11","cpe:2.3:a:siemens:wincc:v11:*:*:*:*:*:*:*",{"vendor":39,"product":60,"version":61,"criteria":62,"vulnerable":4},"simatic_hmi_panels","comfort_panels","cpe:2.3:a:siemens:simatic_hmi_panels:comfort_panels:*:*:*:*:*:*:*",{"vendor":39,"product":60,"version":64,"criteria":65,"vulnerable":4},"mobile_panels","cpe:2.3:a:siemens:simatic_hmi_panels:mobile_panels:*:*:*:*:*:*:*",{"vendor":39,"product":60,"version":67,"criteria":68,"vulnerable":4},"mp","cpe:2.3:a:siemens:simatic_hmi_panels:mp:*:*:*:*:*:*:*",{"vendor":39,"product":60,"version":70,"criteria":71,"vulnerable":4},"op","cpe:2.3:a:siemens:simatic_hmi_panels:op:*:*:*:*:*:*:*",{"vendor":39,"product":60,"version":73,"criteria":74,"vulnerable":4},"tp","cpe:2.3:a:siemens:simatic_hmi_panels:tp:*:*:*:*:*:*:*",{"vendor":39,"product":76,"version":57,"criteria":77,"vulnerable":4},"wincc_runtime_advanced","cpe:2.3:a:siemens:wincc_runtime_advanced:v11:*:*:*:*:*:*:*",{"vendor":39,"product":79,"version":54,"criteria":80,"vulnerable":4},"wincc_flexible_runtime","cpe:2.3:a:siemens:wincc_flexible_runtime:*:*:*:*:*:*:*:*",13,[83,88,93,95],{"url":84,"source":85,"tags":86},"http:\u002F\u002Fwww.siemens.com\u002Fcorporate-technology\u002Fpool\u002Fde\u002Fforschungsfelder\u002Fsiemens_security_advisory_ssa-345442.pdf","Siemens",[87],"Vendor Advisory",{"url":89,"source":90,"tags":91},"http:\u002F\u002Fwww.us-cert.gov\u002Fcontrol_systems\u002Fpdf\u002FICSA-12-030-01.pdf","Us-cert",[92],"US Government Resource",{"url":84,"source":85,"tags":94},[87],{"url":89,"source":90,"tags":96},[92],4,[99],{"id":100,"name":101,"description":102,"extendedDescription":27,"status":103,"abstraction":104,"structure":105},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","Draft","Class","Simple",1,[],{"title":109,"metaDescription":110,"keywords":111,"canonicalUrl":112,"structuredData":113},"What is CVE-2011-4508? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2011-4508, a critical severity cyber security vulnerability from 2012. The HMI web server in Siemens WinCC flexible 2004, 2005,...","CVE-2011-4508, CVE-2011-4508 vulnerability, CVE-2011-4508 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2012, CVSS score, exploit, patch, remediation, siemens security, wincc_flexible vulnerability, wincc vulnerability, simatic_hmi_panels vulnerability","\u002Fwhat-is\u002Fcve-2011-4508",{"@context":114,"@type":115,"headline":109,"description":110,"datePublished":10,"dateModified":11,"author":116,"publisher":120,"about":124,"mainEntityOfPage":128,"articleSection":131,"keywords":132},"https:\u002F\u002Fschema.org","TechArticle",{"@type":117,"name":118,"url":119},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":117,"name":118,"url":119,"logo":121},{"@type":122,"url":123},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":125,"name":6,"description":126,"additionalType":127},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":129,"@id":130},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2011-4508","Cybersecurity","CVE-2011-4508, CVE-2011-4508 vulnerability, CVE-2011-4508 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[134,153,164,178,184],{"Operator":28,"Negate":28,"Nodes":135},[136],{"Operator":137,"Negate":32,"CPEMatch":138},"OR",[139,141,143,145,147,150],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":140,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"7D596C29-36F8-44F2-897D-FD107769E5A9",{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":142,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"2D84E29A-4BC2-4229-83C3-D9F7A641D19C",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":144,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"9B3ADDE1-1F91-43E7-A3C3-3069916F4B23",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":146,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"1432EC7A-47B2-41D1-B90B-72DBB79AC266",{"Vulnerable":4,"Criteria":148,"MatchCriteriaID":149,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:siemens:wincc_flexible:2008:sp1:*:*:*:*:*:*","1A4B1323-9AF3-424F-925A-A62F35E575E0",{"Vulnerable":4,"Criteria":151,"MatchCriteriaID":152,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:siemens:wincc_flexible:2008:sp2:*:*:*:*:*:*","E454C72B-7804-402B-9C6A-687BF2C45D39",{"Operator":28,"Negate":28,"Nodes":154},[155],{"Operator":137,"Negate":32,"CPEMatch":156},[157,159,161],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":158,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":57},"9FE44373-06BD-4AA0-8778-06F2A150510C",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":160,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"18A9883B-80E1-4B2E-88DA-D2326AE3DC08",{"Vulnerable":4,"Criteria":162,"MatchCriteriaID":163,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:siemens:wincc:v11:sp1:*:*:*:*:*:*","F53FDA20-FE97-4BA3-9165-F0BD7A25FA5F",{"Operator":28,"Negate":28,"Nodes":165},[166],{"Operator":137,"Negate":32,"CPEMatch":167},[168,170,172,174,176],{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":169,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"DC593746-B329-43EA-8CA1-AA56AC5A3B10",{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":171,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"1DF877E8-A0D1-4444-99F2-8A3E8ED4D31B",{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":173,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"442AC914-BDD5-4D0C-9E04-88F60EE2B730",{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":175,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"D9749966-1666-4F7D-90D0-17AFBB88AE83",{"Vulnerable":4,"Criteria":74,"MatchCriteriaID":177,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"9471D239-08B1-4076-82F7-2B73F4E343CE",{"Operator":28,"Negate":28,"Nodes":179},[180],{"Operator":137,"Negate":32,"CPEMatch":181},[182],{"Vulnerable":4,"Criteria":77,"MatchCriteriaID":183,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"1AE3AE80-C7A2-4581-993A-536936F6D315",{"Operator":28,"Negate":28,"Nodes":185},[186],{"Operator":137,"Negate":32,"CPEMatch":187},[188],{"Vulnerable":4,"Criteria":80,"MatchCriteriaID":189,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"6F785262-BBFB-4A0C-A7DC-97F5D6B94BB0",[],[],{"lastModified":11,"cacheTime":193,"version":22},1792381117730,{"score":195,"band":196,"action":197,"scoredAt":198},54,"Medium","Plan remediation","2026-10-17T06:38:33.00821+00:00"]