CVE-2014-4685

Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows local users to gain privileges by leveraging weak system-object access control.

Score

CVSS 2.0 4.6 Medium

Status

Modified - cve@mitre.org

Published

2014-07-24

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Simatic Pcs7 (Siemens)
• Wincc (Siemens)

References

• http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-214365.pdf