CVE-2016-5744

EUVD-2016-6679
Siemens SIMATIC WinCC 7.0 through SP3 and 7.2 allows remote attackers to read arbitrary WinCC station files via crafted packets.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 73%
Affected Products (NVD)
VendorProductVersion
siemenssimatic_wincc
7.0
siemenssimatic_wincc
7.0:sp1
siemenssimatic_wincc
7.0:sp2
siemenssimatic_wincc
7.0:sp3
siemenssimatic_wincc
7.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/92116
http://www.securitytracker.com/id/1036441
http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-378531.pdf
https://ics-cert.us-cert.gov/advisories/ICSA-16-208-01
http://www.securityfocus.com/bid/92116
http://www.securitytracker.com/id/1036441
http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-378531.pdf
https://ics-cert.us-cert.gov/advisories/ICSA-16-208-01