Siemens WinCC 7.2 Multiple Vulnerabilities

🗓️ 21 Mar 2013 06:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 30 Views

Siemens WinCC 7.2 Multiple Vulnerabilities advisory for hard-coded credentials, SQL injection, and forced browsing, affecting multiple industries and could allow attacker full system acces

Reporter	Title	Published	Views	Family All 27
BDU FSTEC	The vulnerability of the Simatic PCS 7 software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Simatic PCS 7 software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Simatic PCS 7 software allows a remote attacker to compromise the confidentiality of protected information.	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Simatic WinCC software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Simatic WinCC software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Simatic WinCC software allows a remote attacker to compromise the confidentiality of protected information.	6 Jul 201600:00	–	bdu_fstec
CVE	CVE-2013-3957	14 Jun 201319:00	–	cve
CVE	CVE-2013-3958	14 Jun 201319:00	–	cve
CVE	CVE-2013-3959	14 Jun 201319:00	–	cve
Cvelist	CVE-2013-3957	14 Jun 201319:00	–	cvelist

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2013/icsa-13-169-02.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-13-169-02
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014

21 Mar 2013 06:00Current

7.6High risk

Vulners AI Score7.6

CVSS 27.5

EPSS0.00423