Vulnerabilities > CVE-2013-3958 - Credentials Management vulnerability in Siemens Simatic Pcs7 and Wincc
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
The login implementation in the Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and earlier and other products, has a hardcoded account, which makes it easier for remote attackers to obtain access via an unspecified request.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 15 |