Authentication Bypass in Siemens Product Line

CVE-2012-3030

Summary

An information disclosure vulnerability exists in the WebNavigator component of Siemens WinCC 7.0 SP3 and earlier. This flaw allows unauthorized users to access sensitive configuration and log files stored under the web root due to inadequate access control measures. By sending direct requests, remote attackers can exploit this weakness to gain unauthorized insights into system operations, potentially compromising the integrity and confidentiality of the affected installations.

References