CVEvulnerability

CVE-2015-1602

2.1 LOW Published 2015-04-06 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-04-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-200

Description

Siemens SIMATIC STEP 7 (TIA Portal) 12 and 13 before 13 SP1 Upd1 improperly stores password data within project files, which makes it easier for local users to determine cleartext (1) protection-level passwords or (2) web-server passwords by leveraging the ability to read these files.

Affected configurations

• siemens simatic step 7 (<= 13.0) • siemens simatic step 7 12.0 • siemens simatic step 7 13.0

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References