Vulnerabilities > CVE-2017-2684 - Authentication Bypass vulnerability in Siemens Simatic Logon 1.5
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL network
siemens
Summary
Siemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow an attacker with knowledge of a valid user name, and physical or network access to the affected system, to bypass the application-level authentication.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |