| Package | Affected versions | Patched versions |
|---|---|---|
| simatic pcs7 | = 8.0≤ 8.0 | |
| wincc | = 7.0= 7.1≤ 7.2 |
The login implementation in the Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and earlier and other products, has a hardcoded account, which makes it easier for remote attackers to obtain access via an unspecified request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free