CVE-2017-2684

Siemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow an attacker with knowledge of a valid user name, and physical or network access to the affected system, to bypass the application-level authentication.

Score

CVSS 3.0 9.0 Critical

Status

Modified - productcert@siemens.com

Published

2017-02-22

Last modified

2024-08-05

Weaknesses

CWE-592

Affected products

• Simatic Logon (Siemens)

References

• http://www.securityfocus.com/bid/96208
• https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-931064.pdf