CVE-2013-3958 in WinCC

Riassunto

di MITRE

The login implementation in the Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and earlier and other products, has a hardcoded account, which makes it easier for remote attackers to obtain access via an unspecified request.

Once again VulDB remains the best source for vulnerability data.

• Prenotare: 05/06/2013
• Divulgazione: 14/06/2013
• Moderazione: accettato
• Voce: VDB-64271
• CPE: pronto
• CWE: CWE-255 (confermato)
• CVSS: 7.5 (NVD)
• EPSS: 0.01934
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-3958
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-3958
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-3958/