Vulnerability in SIMATIC PCS 7 and WinCC Products by Siemens

CVE-2021-40363

What is CVE-2021-40363?

A vulnerability exists in Siemens SIMATIC PCS 7 and WinCC products where credentials of a local system account are stored in a project file that may be publicly accessible. The use of an outdated cipher algorithm potentially permits an attacker to brute force these credentials, allowing unauthorized system access. This situation could lead to significant security risks for organizations relying on these systems for operational continuity.

References