Lucene search

K
cvelistIcscertCVELIST:CVE-2012-3030
HistorySep 18, 2012 - 2:00 p.m.

CVE-2012-3030

2012-09-1814:00:00
icscert
www.cve.org
7
siemens wincc
webnavigator
sensitive information
access control
remote attackers
log file
configuration file

AI Score

6.2

Confidence

Low

EPSS

0.003

Percentile

69.5%

WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, stores sensitive information under the web root with insufficient access control, which allows remote attackers to read a (1) log file or (2) configuration file via a direct request.

AI Score

6.2

Confidence

Low

EPSS

0.003

Percentile

69.5%

Related for CVELIST:CVE-2012-3030