Lucene search

[email protected]CVE-2015-1594

HistoryMar 07, 2015 - 2:59 a.m.

CVE-2015-1594

2015-03-0702:59:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2015-1594

siemens

simatic

prosave

vulnerability

privilege escalation

nvd

6.6 Medium

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.3%

JSON

Untrusted search path vulnerability in Siemens SIMATIC ProSave before 13 SP1; SIMATIC CFC before 8.0 SP4 Upd9 and 8.1 before Upd1; SIMATIC STEP 7 before 5.5 SP1 HF2, 5.5 SP2 before HF7, 5.5 SP3, and 5.5 SP4 before HF4; SIMOTION Scout before 4.4; and STARTER before 4.4 HF3 allows local users to gain privileges via a Trojan horse application file.

CPENameOperatorVersion
siemens:startersiemens starterle4.4
siemens:simatic_prosavesiemens simatic prosaveeq13.0
siemens:simotion_scoutsiemens simotion scoutle4.3
siemens:simatic_cfcsiemens simatic cfceq8.1
siemens:simatic_cfcsiemens simatic cfcle8.0
siemens:simatic_step_7siemens simatic step 7eq5.5

CPE	Name	Operator	Version
siemens:starter	siemens starter	le	4.4
siemens:simatic_prosave	siemens simatic prosave	eq	13.0
siemens:simotion_scout	siemens simotion scout	le	4.3
siemens:simatic_cfc	siemens simatic cfc	eq	8.1
siemens:simatic_cfc	siemens simatic cfc	le	8.0
siemens:simatic_step_7	siemens simatic step 7	eq	5.5

References

www.securitytracker.com/id/1032039

www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-451236.pdf

6.6 Medium

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.3%

JSON

Related for CVE-2015-1594

ics2 prion1