CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
AI Score
Confidence
Low
EPSS
Percentile
5.1%
Siemens SIMATIC STEP 7 (TIA Portal) 12 and 13 before 13 SP1 Upd1 improperly stores password data within project files, which makes it easier for local users to determine cleartext (1) protection-level passwords or (2) web-server passwords by leveraging the ability to read these files.
Vendor | Product | Version | CPE |
---|---|---|---|
siemens | simatic_step_7 | * | cpe:2.3:a:siemens:simatic_step_7:*:sp1:*:*:*:*:*:* |
siemens | simatic_step_7 | 12.0 | cpe:2.3:a:siemens:simatic_step_7:12.0:*:*:*:*:*:*:* |
siemens | simatic_step_7 | 13.0 | cpe:2.3:a:siemens:simatic_step_7:13.0:*:*:*:*:*:*:* |