Show filters
33 Total Results
Displaying 31-33 of 33
Sort by:
Attacker Value
Unknown
CVE-2015-1355
Disclosure Date: February 18, 2015 (last updated October 05, 2023)
Siemens SIMATIC STEP 7 (TIA Portal) before 13 SP1 uses a weak password-hash algorithm, which makes it easier for local users to determine cleartext passwords by reading a project file and conducting a brute-force attack.
0
Attacker Value
Unknown
CVE-2015-1356
Disclosure Date: February 18, 2015 (last updated October 05, 2023)
Siemens SIMATIC STEP 7 (TIA Portal) before 13 SP1 determines a user's privileges on the basis of project-file fields that lack integrity protection, which allows remote attackers to establish arbitrary authorization data via a modified file.
0
Attacker Value
Unknown
CVE-2012-3015
Disclosure Date: July 26, 2012 (last updated October 04, 2023)
Untrusted search path vulnerability in Siemens SIMATIC STEP7 before 5.5 SP1, as used in SIMATIC PCS7 7.1 SP3 and earlier and other products, allows local users to gain privileges via a Trojan horse DLL in a STEP7 project folder.
0
