Security Advisory

CVE-2013-0678

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2013-03-21 15:00:00
Last updated 2024-09-17 00:01:41
Assigner icscert
State PUBLISHED

Description

Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, does not properly represent WebNavigator credentials in a database, which makes it easier for remote authenticated users to obtain sensitive information via a SQL query.