medium4.4
CVE-2015-1356
Siemens SIMATIC STEP 7 (TIA Portal) before 13 SP1 determines a user's privileges on the basis of project-file fields that lack integrity protection, which allo…
Impact
Siemens SIMATIC STEP 7 (TIA Portal) before 13 SP1 determines a user's privileges on the basis of project-file fields that lack integrity protection, which allows remote attackers to establish arbitrary authorization data via a modified file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Simatic Step 7 | through 13.0 |