CVEvulnerability

CVE-2015-1594

6.9 MEDIUM Published 2015-03-07 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-03-07
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C

Description

Untrusted search path vulnerability in Siemens SIMATIC ProSave before 13 SP1; SIMATIC CFC before 8.0 SP4 Upd9 and 8.1 before Upd1; SIMATIC STEP 7 before 5.5 SP1 HF2, 5.5 SP2 before HF7, 5.5 SP3, and 5.5 SP4 before HF4; SIMOTION Scout before 4.4; and STARTER before 4.4 HF3 allows local users to gain privileges via a Trojan horse application file.

Affected configurations

• siemens starter (<= 4.4) • siemens simatic prosave 13.0 • siemens simotion scout (<= 4.3) • siemens simatic cfc (<= 8.0) • siemens simatic cfc 8.1 • siemens simatic step 7 (<= 5.5) • siemens simatic step 7 5.5

References