Description (CNA)
Siemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow an attacker with knowledge of a valid user name, and physical or network access to the affected system, to bypass the application-level authentication.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / SIMATIC Logon All versions < V1.5 SP3 Update 2 | affected SIMATIC Logon All versions < V1.5 SP3 Update 2 |
CWE
CWE-592
References
- http://www.securityfocus.com/bid/96208
- https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-931064.pdf
ADP enrichment
No English description supplied.