CVE-2010-2772
22.07.2010, 05:43
Siemens Simatic WinCC and PCS 7 SCADA system uses a hard-coded password, which allows local users to access a back-end database and gain privileges, as demonstrated in the wild in July 2010 by the Stuxnet worm, a different vulnerability than CVE-2010-2568.Enginsight
| Vendor | Product | Version |
|---|---|---|
| siemens | simatic_wincc | 6.2 |
| siemens | simatic_wincc | 7.0 |
| siemens | simatic_pcs_7 | 6.0 |
| siemens | simatic_pcs_7 | 6.1 |
| siemens | simatic_pcs_7 | 7.0 |
| siemens | simatic_pcs_7 | 7.0:sp1 |
| siemens | simatic_pcs_7 | 7.1 |
| siemens | simatic_pcs_7 | 7.1:sp1 |
𝑥
= Vulnerable software versions
References