Vulnerability in Siemens Simatic Pcs7

CVE-2014-4685

Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows local users to gain privileges by leveraging weak system-object access control.

EPSS: 0.004 (29.5th percentile) — read the EPSS interpretation.

Affected products

Siemens Simatic_pcs7 — versions 7.1, 8.0
Siemens Wincc — versions 5.0, 6.0, 7.0
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)