Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2017-2684

Siemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow an attacker with knowledge of a valid user name, and physical or network access to the affected system, to bypass the a

Description

Siemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow an attacker with knowledge of a valid user name, and physical or network access to the affected system, to bypass the application-level authentication.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a SIMATIC Logon All versions < V1.5 SP3 Update 2

  • SIMATIC Logon All versions < V1.5 SP3 Update 2affected

References