NetSight
IP …
high7.8

CVE-2010-2772

Siemens Simatic WinCC and PCS 7 SCADA system uses a hard-coded password, which allows local users to access a back-end database and gain privileges, as demonst…

Impact

Siemens Simatic WinCC and PCS 7 SCADA system uses a hard-coded password, which allows local users to access a back-end database and gain privileges, as demonstrated in the wild in July 2010 by the Stuxnet worm, a different vulnerability than CVE-2010-2568.

Affected products

VendorProductAffected versions
SiemensSimatic Wincc
Versions 6.2, 7.0
SiemensSimatic Pcs 7
Versions 6.0, 6.1, 7.0, 7.1

Weakness classification

CWE-798

References