CVE-2012-3034

CWE-200 — Information Exposure3 documents3 sources
Severity
4.3MEDIUM
EPSS
0.5%
top 33.27%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Siemens WinccSiemens Simatic Pcs7
Timeline
PublishedSep 18
Latest updateMay 17

Description

WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to discover a username and password via crafted parameters to unspecified methods in ActiveX controls.

CVSS vector

AV:N/AC:M/C:P/I:N/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages2 packages

▶NVDsiemens/wincc7.0+3

Patches

Patch: www.siemens.com ↗Patch: www.siemens.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-qf4p-43cj-h58j: WebNavigator in Siemens WinCC 7↗2022-05-17
▶
CVEList
CVE-2012-3034: WebNavigator in Siemens WinCC 7↗2012-09-18
▶
CVE-2012-3034 (MEDIUM CVSS 4.3) | WebNavigator in Siemens WinCC 7.0 S | cvebase.io