CVE-2012-3020

2012-08-0616:00:00

icscert

www.cve.org

siemens

synco ozw

web server

default password

vulnerability

remote attackers

AI Score

6.8

Confidence

Low

EPSS

0.005

Percentile

77.4%

JSON

The Siemens Synco OZW Web Server devices OZW672., OZW772., and OZW775 with firmware before 4 have an unspecified default password, which makes it easier for remote attackers to obtain administrative access via a network session.

References

support.automation.siemens.com/WW/view/en/41929231/130000

www.us-cert.gov/control_systems/pdf/ICSA-12-214-01.pdf