Siemens SRCS VPN Feature in SIMATIC CP Devices
The application lacks proper validation of user-supplied data when parsing specific messages. This could result in a heap-based buffer overflow. An attacker could leverage this vulnerability to execute code in the context of device. The application does not correctly escape some user provided fields during the authentication process. This could allow an attacker to inject custom commands and execute arbitrary code with elevated privileges. By injecting code to specific configuration options for OpenVPN, an attacker could execute arbitrary code with elevated privileges.