CVE-2013-3957

Name of the Vulnerable Software and Affected Versions Siemens WinCC versions prior to 7.2 Update 1

Description The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors. This is related to a SQL injection vulnerability in the login screen of the Web Navigator in Siemens WinCC.

Recommendations For versions prior to 7.2 Update 1, update to version 7.2 Update 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the login screen of the Web Navigator to minimize the risk of exploitation.