cbcvebase.
CVE-2014-4685
published 2014-07-24

CVE-2014-4685: Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows local users to gain privileges by leveraging weak system-object access control.

medium4.6CVSS 3.1
AVLACLAuNCPIPAP
Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows local users to gain privileges by leveraging weak system-object access control.

Affected

8 ranges
VendorProductVersion rangeFixed in
siemenssimatic_pcs7<= 8.0
siemenssimatic_pcs7
siemenssimatic_pcs7
siemenswincc<= 7.2
siemenswincc
siemenswincc
siemenswincc
siemenswincc