PT-2015-6772 · Siemens · Simatic Wincc Sm@Rtclient

Karsten Sohr + 1 · Published 2015-08-03 · Updated 2017-09-21 · CVE-2015-5084

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC Sm@rtClient and Sm@rtClient Lite versions prior to 01.00.01.00

Description The issue concerns the improper storage of passwords, allowing physically proximate attackers to obtain sensitive information.

Recommendations For versions prior to 01.00.01.00, update to version 01.00.01.00 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2015-5084

Affected Products

Simatic Wincc Sm@Rtclient

References · 5

• http://siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-267489.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-5084 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-15-202-02 · Note
• http://securityfocus.com/bid/75981 · Note
• http://securitytracker.com/id/1033021 · Note