CVE-2017-2684
N/A
N/A
Summary
Siemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow an attacker with knowledge of a valid user name, and physical or network access to the affected system, to bypass the application-level authentication.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | SIMATIC Logon All versions < V1.5 SP3 Update 2 | SIMATIC Logon All versions < V1.5 SP3 Update 2 | affected |
Weaknesses
- CWE-592: CWE-592: Authentication Bypass Issues
ADP Enrichment
CVE Program Container
Additional References
- http://www.securityfocus.com/bid/96208
- https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-931064.pdf
References
- http://www.securityfocus.com/bid/96208
- https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-931064.pdf
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.