PT-2013-26: Information Disclosure in Siemens Simatic WinCC and PCS 7

The specialists of the Positive Research center have detected "Information Disclosure" vulnerability in Siemens Simatic WinCC and PCS 7. Users with legitimate, non-privileged access to WinCC MS SQL database can retrieve obfuscated user passwords for WebNavigator. For doing this, access to the...