Vulnerabilities > CVE-2013-3958 - Credentials Management vulnerability in Siemens Simatic Pcs7 and Wincc
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
The login implementation in the Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and earlier and other products, has a hardcoded account, which makes it easier for remote attackers to obtain access via an unspecified request.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 15 |