Lucene search
IcscertCVE-2012-3032HistorySep 18, 2012 - 2:55 p.m.
CVE-2012-3032
2012-09-1814:55:01
CWE-89
icscert
web.nvd.nist.gov
38
cve-2012-3032
sql injection
siemens wincc
webnavigator
nvd
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.4
Confidence
Low
EPSS
0.002
Percentile
51.9%
SQL injection vulnerability in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to execute arbitrary SQL commands via a crafted SOAP message.
Affected configurations
Node
siemenssimatic_pcs7Match8.0
ORsiemenswinccRange≤7.0sp3
ORsiemenswinccMatch5.0
ORsiemenswinccMatch5.0sp1
ORsiemenswinccMatch6.0
ORsiemenswinccMatch6.0sp2
ORsiemenswinccMatch6.0sp3
ORsiemenswinccMatch6.0sp4
ORsiemenswinccMatch7.0
ORsiemenswinccMatch7.0sp1
ORsiemenswinccMatch7.0sp2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| siemens | simatic_pcs7 | 8.0 | cpe:2.3:a:siemens:simatic_pcs7:8.0:*:*:*:*:*:*:* |
| siemens | wincc | * | cpe:2.3:a:siemens:wincc:*:sp3:*:*:*:*:*:* |
| siemens | wincc | 5.0 | cpe:2.3:a:siemens:wincc:5.0:*:*:*:*:*:*:* |
| siemens | wincc | 5.0 | cpe:2.3:a:siemens:wincc:5.0:sp1:*:*:*:*:*:* |
| siemens | wincc | 6.0 | cpe:2.3:a:siemens:wincc:6.0:*:*:*:*:*:*:* |
| siemens | wincc | 6.0 | cpe:2.3:a:siemens:wincc:6.0:sp2:*:*:*:*:*:* |
| siemens | wincc | 6.0 | cpe:2.3:a:siemens:wincc:6.0:sp3:*:*:*:*:*:* |
| siemens | wincc | 6.0 | cpe:2.3:a:siemens:wincc:6.0:sp4:*:*:*:*:*:* |
| siemens | wincc | 7.0 | cpe:2.3:a:siemens:wincc:7.0:*:*:*:*:*:*:* |
| siemens | wincc | 7.0 | cpe:2.3:a:siemens:wincc:7.0:sp1:*:*:*:*:*:* |
Related
prion
prion
Sql injection
2012-09-18 14:55:00
ptsecurity
ptsecurity
nvd
nvd
CVE-2012-3032
2012-09-18 14:55:01
cvelist
cvelist
CVE-2012-3032
2012-09-18 14:00:00
ics
ics
Siemens WinCC WebNavigator Multiple Vulnerabilities
2014-08-29 12:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.4
Confidence
Low
EPSS
0.002
Percentile
51.9%
Related for CVE-2012-3032