PT-2015-3791

CVE-2014-5233

·

Published

2015-01-14

·

Updated

2015-11-13

Description by

CVSS 2.0
1.9
Low
MetricsAV:L/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC Sm@rtClient app version 1.0.1 and earlier
Description The issue allows physically proximate attackers to discover Sm@rtServer credentials due to an error in the credential-processing mechanism.
Recommendations For versions prior to 1.0.2, update to version 1.0.2 or later to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Related identifiers
CVE-2014-5233
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com