Vulnerability Details CVE-2015-1356
Siemens SIMATIC STEP 7 (TIA Portal) before 13 SP1 determines a user's privileges on the basis of project-file fields that lack integrity protection, which allows remote attackers to establish arbitrary authorization data via a modified file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 33.4%
CVSS Severity
CVSS v2 Score 4.4
References
Products affected by CVE-2015-1356
-
cpe:2.3:a:siemens:simatic_step_7:12.0
-
cpe:2.3:a:siemens:simatic_step_7:13
-
cpe:2.3:a:siemens:simatic_step_7:13.0
-
cpe:2.3:a:siemens:simatic_step_7:5.5
-
cpe:2.3:a:siemens:simatic_step_7:5.6