CVEvulnerability
CVE-2016-7960
2.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2016-10-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 2.5 LOW — CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 1.9 LOW — AV:L/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
Siemens SIMATIC STEP 7 (TIA Portal) before 14 uses an improper format for managing TIA project files during version updates, which makes it easier for local users to obtain sensitive configuration information via unspecified vectors.
Affected configurations
• siemens simatic step 7 (<= 13.010)
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www.securityfocus.com/bid/93551 Third Party Advisory, VDB Entry
- http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-869766.pdf Vendor Advisory
- https://ics-cert.us-cert.gov/advisories/ICSA-16-287-03 Mitigation, Patch, Third Party Advisory, US Government Resource, VDB Entry
- http://www.securityfocus.com/bid/93551 Third Party Advisory, VDB Entry
- http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-869766.pdf Vendor Advisory
- https://ics-cert.us-cert.gov/advisories/ICSA-16-287-03 Mitigation, Patch, Third Party Advisory, US Government Resource, VDB Entry