CVE-2012-3020

2022-10-0316:15:23

icscert

www.cve.org

siemens

synco ozw

web server

default password

vulnerability

remote attackers

6.8 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.5%

JSON

The Siemens Synco OZW Web Server devices OZW672., OZW772., and OZW775 with firmware before 4 have an unspecified default password, which makes it easier for remote attackers to obtain administrative access via a network session.

References

support.automation.siemens.com/WW/view/en/41929231/130000

www.us-cert.gov/control_systems/pdf/ICSA-12-214-01.pdf