CVE-2014-4685

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC versions prior to 7.3

Description The issue allows a local user to gain limited elevated privileges of the operating system user by leveraging weak system-object access control. This could potentially be exploited to gain increased access to system resources.

Recommendations For Siemens SIMATIC WinCC versions prior to 7.3, update to version 7.3 or later to resolve the issue.