PT-2017-17386

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC Sm@rtClient for Android versions prior to 1.0.2.2 Siemens SIMATIC WinCC Sm@rtClient for Android Lite versions prior to 1.0.2.2 Description A vulnerability was discovered that allows an attacker with physical access to an...

CVE-2017-6870: Channel Accessible by Non-Endpoint

A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android All versions before V1.0.2.2. The existing TLS protocol implementation could allow an attacker to read and modify data within a TLS session while performing a Man-in-the-Middle MitM attack...

PT-2017-17385

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC Sm@rtClient for Android versions prior to V1.0.2.2 Description A security issue was found in the TLS protocol implementation, allowing an attacker to intercept and alter data during a Man-in-the-Middle MitM attack...

CVE-2015-5084: Exposure of Sensitive Information to an Unauthorized Actor

The Siemens SIMATIC WinCC Sm@rtClient and Sm@rtClient Lite applications before 01.00.01.00 for Android do not properly store passwords, which allows physically proximate attackers to obtain sensitive information via unspecified vectors...

PT-2015-6772

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC Sm@rtClient and Sm@rtClient Lite versions prior to 01.00.01.00 Description The issue concerns the improper storage of passwords, allowing physically proximate attackers to obtain sensitive information. Recommendations For...

PT-2015-3790

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC Sm@rtClient app versions prior to 1.0.2 Description The issue allows local users to bypass an intended application-password requirement. This is achieved by leveraging the running of the app in the background state...

CVE-2014-5231: Exposure of Sensitive Information to an Unauthorized Actor

The Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows physically proximate attackers to extract the password from storage via unspecified vectors...

CVE-2014-5233: Exposure of Sensitive Information to an Unauthorized Actor

The Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows physically proximate attackers to discover Sm@rtServer credentials by leveraging an error in the credential-processing mechanism...

PT-2015-3789

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC Sm@rtClient app versions prior to 1.0.2 Description The issue allows physically proximate attackers to extract the password from storage. Recommendations For versions prior to 1.0.2, update to version 1.0.2 or later to...

CVE-2014-5232: Undefined Security Weakness

The Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows local users to bypass an intended application-password requirement by leveraging the running of the app in the background state...

PT-2015-3791

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC Sm@rtClient app version 1.0.1 and earlier Description The issue allows physically proximate attackers to discover Sm@rtServer credentials due to an error in the credential-processing mechanism. Recommendations For version...