Vulnerability in Siemens Simatic_pcs7

CVE-2014-4683

The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a (1) HTTP or (2) HTTPS request.

EPSS: 0.002 (36.4th percentile) — read the EPSS interpretation.

Affected products

Siemens Simatic_pcs7 — versions 7.1, 8.0
Siemens Wincc — versions 5.0, 6.0, 7.0
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)