CVE-2014-4685

CWE-2643 documents3 sources
Severity
4.6MEDIUM
EPSS
0.1%
top 83.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Siemens Simatic Pcs7Siemens Wincc
Timeline
PublishedJul 24
Latest updateMay 17

Description

Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows local users to gain privileges by leveraging weak system-object access control.

CVSS vector

AV:L/AC:L/C:P/I:P/A:PExploitability: 3.9 | Impact: 6.4

Affected Packages2 packages

▶NVDsiemens/wincc7.2+4

🔴Vulnerability Details

2
GHSA
GHSA-wxqj-xf24-h57v: Siemens SIMATIC WinCC before 7↗2022-05-17
▶
CVEList
CVE-2014-4685: Siemens SIMATIC WinCC before 7↗2014-07-24
▶