Vulnerabilities > CVE-2013-0678 - Credentials Management vulnerability in Siemens Simatic Pcs7 and Wincc

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
siemens
CWE-255
NVD
Published: 2013-03-21
Updated: 2024-11-21

Summary

Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, does not properly represent WebNavigator credentials in a database, which makes it easier for remote authenticated users to obtain sensitive information via a SQL query.

Vulnerable Configurations

Part Description Count
Application
Siemens
8

Common Weakness Enumeration (CWE)

References