CVE-2016-7959

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC STEP 7 (TIA Portal) versions prior to 14

Description The issue is related to the incorrect storage of pre-shared keys in TIA project files. This could allow a local attacker to gain access to sensitive information, potentially by conducting a brute-force attack after obtaining access to a file.

Recommendations For versions prior to 14, update to version 14 or later to resolve the issue. As a temporary workaround, consider restricting access to TIA project files to minimize the risk of exploitation.