Vulnerability in Siemens Simatic Pcs7

CVE-2014-4683

The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a (1) HTTP or (2) HTTPS request.

EPSS: 0.012 (66.7th percentile) — read the EPSS interpretation.

Affected products

Siemens Simatic_pcs7 — versions 7.1, 8.0
Siemens Wincc — versions 5.0, 6.0, 7.0
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)