Information disclosure in Apple Iphone OS
CVE-2014-5233
The Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows physically proximate attackers to discover Sm@rtServer credentials by leveraging an error in the credential-processing mechanism.
Vulnerability class: Information Disclosure
EPSS: 0.004 (28.4th percentile) — read the EPSS interpretation.
Affected products
- Apple Iphone_os
- Siemens Simatic_wincc_sm\@rtclient
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)