8.2 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
50.6%
SQL injection vulnerability in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to execute arbitrary SQL commands via a crafted SOAP message.
en.securitylab.ru/lab/PT-2012-44
www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-864051.pdf
www.us-cert.gov/control_systems/pdf/ICSA-12-256-01.pdf