CVEvulnerability

CVE-2013-0677

5.8 MEDIUM Published 2013-03-21 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-03-21
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:P
Weaknesses
CWE-200

Description

The web server in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote attackers to obtain sensitive information or cause a denial of service via a crafted project file.

Affected configurations

• siemens simatic pcs7 (<= 8.0) • siemens simatic pcs7 7.1 • siemens wincc (<= 7.1) • siemens wincc 5.0 • siemens wincc 6.0 • siemens wincc 7.0

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References