CVE-2013-0676

2022-10-0316:15:03

icscert

www.cve.org

siemens

wincc

privilege

assignment

vulnerability

database

webnavigator

credentials

remote

authenticated

sql

query

6.1 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.1%

JSON

Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, does not properly assign privileges for the database containing WebNavigator credentials, which allows remote authenticated users to obtain sensitive information via a SQL query.