Vulnerability Description
Siemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow an attacker with knowledge of a valid user name, and physical or network access to the affected system, to bypass the application-level authentication.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Simatic Logon | <= 1.5 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/96208Third Party AdvisoryVDB Entry
- https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-931064.pdfVendor Advisory
- http://www.securityfocus.com/bid/96208Third Party AdvisoryVDB Entry
- https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-931064.pdfVendor Advisory
FAQ
What is CVE-2017-2684?
CVE-2017-2684 is a vulnerability with a CVSS score of 9.0 (CRITICAL). Siemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow an attacker with knowledge of a valid user name, and physical or network access to the affected system, to bypass the application-level aut...
How severe is CVE-2017-2684?
CVE-2017-2684 has been rated CRITICAL with a CVSS base score of 9.0/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2017-2684?
Check the references section above for vendor advisories and patch information. Affected products include: Siemens Simatic Logon.