CVE-2013-0676

2013-03-2115:00:00

icscert

www.cve.org

siemens

wincc

privilege

assignment

vulnerability

database

webnavigator

credentials

remote

authenticated

sql

query

AI Score

6.1

Confidence

Low

EPSS

0.001

Percentile

46.6%

JSON

Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, does not properly assign privileges for the database containing WebNavigator credentials, which allows remote authenticated users to obtain sensitive information via a SQL query.