Insecure Password Verification in SIMATIC PCS 7 and WinCC by Siemens

CVE-2020-10048

What is CVE-2020-10048?

The identified vulnerability in SIMATIC PCS 7 and SIMATIC WinCC arises from an insecure password verification process. This flaw allows unauthorized individuals to bypass password protections on secured files, effectively granting them access to restricted content and circumventing authentication mechanisms. As a result, sensitive information could be exposed, leading to potential security breaches.

References