CVE-2012-3032

CWE-89 — SQL Injection3 documents3 sources
Severity
7.5HIGH
EPSS
0.5%
top 32.44%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Siemens WinccSiemens Simatic Pcs7
Timeline
PublishedSep 18
Latest updateMay 17

Description

SQL injection vulnerability in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to execute arbitrary SQL commands via a crafted SOAP message.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages2 packages

▶NVDsiemens/wincc7.0+3

Patches

Patch: www.siemens.com ↗Patch: www.siemens.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-3xrj-qr54-846w: SQL injection vulnerability in WebNavigator in Siemens WinCC 7↗2022-05-17
▶
CVEList
CVE-2012-3032: SQL injection vulnerability in WebNavigator in Siemens WinCC 7↗2012-09-18
▶
CVE-2012-3032 (HIGH CVSS 7.5) | SQL injection vulnerability in WebN | cvebase.io