Hardcoded Account Vulnerability in Siemens WinCC and SIMATIC PCS7
CVE-2013-3958

Currently unrated

Key Information:

Vendor

Siemens
Status
Wincc
Simatic Pcs7
Vendor
CVE Published:
14 June 2013

What is CVE-2013-3958?

A vulnerability exists in the login implementation of the Web Navigator in Siemens WinCC prior to version 7.2 Update 1, as well as in SIMATIC PCS7 8.0 SP1 and earlier. This design flaw includes a hardcoded account, allowing remote attackers to potentially gain unauthorized access via unspecified requests. This could lead to significant security risks, emphasizing the importance of timely updates and proper security practices.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www.siemens.com/corporate-technology/pool/de/forsc...
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

JSON
.