high7.5
CVE-2013-3958
The login implementation in the Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and earlier and other products, has a hardc…
Impact
The login implementation in the Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and earlier and other products, has a hardcoded account, which makes it easier for remote attackers to obtain access via an unspecified request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Simatic Pcs7 | through 8.0 Version 8.0 |
| Siemens | Wincc | through 7.2 Versions 7.0, 7.1 |