CVE-2013-0679

CWE-22 — Path Traversal3 documents3 sources

Severity

4.0MEDIUM

EPSS

0.3%

top 43.79%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Siemens Simatic Pcs7 Siemens Wincc

Timeline

PublishedMar 21

Latest updateMay 17

Description

Directory traversal vulnerability in the web server in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote authenticated users to read arbitrary files via vectors involving a query for a pathname.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 8.0 | Impact: 2.9

Affected Packages2 packages

▶NVDsiemens/simatic_pcs78.0+1

▶NVDsiemens/wincc7.1+3

🔴Vulnerability Details

GHSA

GHSA-rg3v-p933-jrxw: Directory traversal vulnerability in the web server in Siemens WinCC before 7↗2022-05-17

▶

CVEList

CVE-2013-0679: Directory traversal vulnerability in the web server in Siemens WinCC before 7↗2013-03-21

▶