Lucene search
IcscertCVE-2012-3034HistorySep 18, 2012 - 2:55 p.m.
CVE-2012-3034
2012-09-1814:55:01
CWE-200
icscert
web.nvd.nist.gov
25
siemens
wincc
remote attackers
credentials
crafted parameters
activex controls
nvd
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
AI Score
7
Confidence
Low
EPSS
0.003
Percentile
68.5%
WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to discover a username and password via crafted parameters to unspecified methods in ActiveX controls.
Affected configurations
Node
siemenssimatic_pcs7Match8.0
ORsiemenswinccRange≤7.0sp3
ORsiemenswinccMatch5.0
ORsiemenswinccMatch5.0sp1
ORsiemenswinccMatch6.0
ORsiemenswinccMatch6.0sp2
ORsiemenswinccMatch6.0sp3
ORsiemenswinccMatch6.0sp4
ORsiemenswinccMatch7.0
ORsiemenswinccMatch7.0sp1
ORsiemenswinccMatch7.0sp2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| siemens | simatic_pcs7 | 8.0 | cpe:2.3:a:siemens:simatic_pcs7:8.0:*:*:*:*:*:*:* |
| siemens | wincc | * | cpe:2.3:a:siemens:wincc:*:sp3:*:*:*:*:*:* |
| siemens | wincc | 5.0 | cpe:2.3:a:siemens:wincc:5.0:*:*:*:*:*:*:* |
| siemens | wincc | 5.0 | cpe:2.3:a:siemens:wincc:5.0:sp1:*:*:*:*:*:* |
| siemens | wincc | 6.0 | cpe:2.3:a:siemens:wincc:6.0:*:*:*:*:*:*:* |
| siemens | wincc | 6.0 | cpe:2.3:a:siemens:wincc:6.0:sp2:*:*:*:*:*:* |
| siemens | wincc | 6.0 | cpe:2.3:a:siemens:wincc:6.0:sp3:*:*:*:*:*:* |
| siemens | wincc | 6.0 | cpe:2.3:a:siemens:wincc:6.0:sp4:*:*:*:*:*:* |
| siemens | wincc | 7.0 | cpe:2.3:a:siemens:wincc:7.0:*:*:*:*:*:*:* |
| siemens | wincc | 7.0 | cpe:2.3:a:siemens:wincc:7.0:sp1:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2012-3034
2012-09-18 14:00:00
nvd
nvd
CVE-2012-3034
2012-09-18 14:55:01
ptsecurity
ptsecurity
prion
prion
Default credentials
2012-09-18 14:55:00
ics
ics
Siemens WinCC WebNavigator Multiple Vulnerabilities
2014-08-29 12:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
AI Score
7
Confidence
Low
EPSS
0.003
Percentile
68.5%
Related for CVE-2012-3034