Vulnerability in Siemens Simatic_cfc

CVE-2015-1594

Untrusted search path vulnerability in Siemens SIMATIC ProSave before 13 SP1; SIMATIC CFC before 8.0 SP4 Upd9 and 8.1 before Upd1; SIMATIC STEP 7 before 5.5 SP1 HF2, 5.5 SP2 before HF7, 5.5 SP3, and 5.5 SP4 before HF4; SIMOTION Scout befor…

EPSS: 0.001 (22.7th percentile) — read the EPSS interpretation.

Affected products

Siemens Simatic_cfc — versions 8.1
Siemens Simatic_prosave — versions 13.0
Siemens Simatic_step_7 — versions 5.5
Siemens Simotion_scout
Siemens Starter
N/a — versions n/a

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
1032039 (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_SECTRACK)