PT-2010-4286 · Siemens · Pcs 7 Scada System+1

Published 2010-07-22 · Updated 2026-04-22 · CVE-2010-2772

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Siemens Simatic WinCC and PCS 7 SCADA system (affected versions not specified)

Description The issue concerns a hard-coded password in the system, allowing local users to access a back-end database and gain privileges. This has been demonstrated in the wild, notably by the Stuxnet worm in July 2010.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2010-2772

Affected Products

Pcs 7 Scada System

Simatic Wincc

References · 19

• 🔥 http://wilderssecurity.com/showpost.php?p=1712134&postcount=22 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-2772 · Security Note
• http://sea.siemens.com/us/News/Industrial/Pages/WinCC_Update.aspx · Vendor Advisory
• https://t.me/cvenotify/104937 · Telegram Post
• http://vupen.com/english/advisories/2010/1893 · Note
• http://automation.siemens.com/forum/guests/PostShow.aspx?PostID=16127&16127&Language=en&PageIndex=1 · Note
• http://support.automation.siemens.com/WW/llisapi.dll?func=cslib.csinfo&lang=en&objid=43876783&caller=viewhttp://support.automation.siemens.com/WW/llisapi.dll?func=cslib.csinfo&lang=en&objid=43876783&c · Note
• http://secunia.com/advisories/40682 · Note
• http://infoworld.com/d/security-central/siemens-warns-users-dont-change-passwords-after-worm-attack-915?sourcefssr · Note
• https://twitter.com/zouwuaoe/status/2046794614812840110 · Twitter Post
• http://securityfocus.com/bid/41753 · Note
• https://t.me/cvenotify/109977 · Telegram Post
• http://ics-cert.us-cert.gov/advisories/ICSA-12-205-01 · Note
• http://infoworld.com/d/security-central/new-weaponized-virus-targets-industrial-secrets-725 · Note
• https://t.me/cvenotify/118101 · Telegram Post