1. Home
  2. CVE Database
  3. CVE-2013-3958
HIGH · 7.5

CVE-2013-3958

The login implementation in the Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and earlier and other products, has a hardcoded account, which makes it easier for r...

Vulnerability Description

The login implementation in the Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and earlier and other products, has a hardcoded account, which makes it easier for remote attackers to obtain access via an unspecified request.

CVSS Score

7.5

HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL

Affected Products

VendorProductVersions
SiemensSimatic Pcs7<= 8.0
SiemensWincc<= 7.2

Related Weaknesses (CWE)

CWE-255

References

FAQ

What is CVE-2013-3958?

CVE-2013-3958 is a vulnerability with a CVSS score of 7.5 (HIGH). The login implementation in the Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and earlier and other products, has a hardcoded account, which makes it easier for r...

How severe is CVE-2013-3958?

CVE-2013-3958 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-3958?

Check the references section above for vendor advisories and patch information. Affected products include: Siemens Simatic Pcs7, Siemens Wincc.