4

CVE-2013-0676

Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, does not properly assign privileges for the database containing WebNavigator credentials, which allows remote authenticated users to obtain sensitive information via a SQL query.

Data is provided by the National Vulnerability Database (NVD)
Siemens ≫ Simatic Pcs7 Version <= 8.0
Siemens ≫ Simatic Pcs7 Version7.1 Updatesp3
Siemens ≫ Wincc Version <= 7.1
Siemens ≫ Wincc Version5.0
Siemens ≫ Wincc Version5.0 Updatesp1
Siemens ≫ Wincc Version6.0
Siemens ≫ Wincc Version6.0 Updatesp2
Siemens ≫ Wincc Version6.0 Updatesp3
Siemens ≫ Wincc Version6.0 Updatesp4
Siemens ≫ Wincc Version7.0
Siemens ≫ Wincc Version7.0 Updatesp1
Siemens ≫ Wincc Version7.0 Updatesp2
Siemens ≫ Wincc Version7.0 Updatesp3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.21% 0.439
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:P/I:N/A:N