Total vulnerabilities in the database
Siemens Simatic WinCC and PCS 7 SCADA system uses a hard-coded password, which allows local users to access a back-end database and gain privileges, as demonstrated in the wild in July 2010 by the Stuxnet worm, a different vulnerability than CVE-2010-2568.
| Software | From | Fixed in |
|---|---|---|
| siemens / simatic_wincc | 6.2 | 6.2.x |
| siemens / simatic_wincc | 7.0 | 7.0.x |
| siemens / simatic_pcs_7 | 7.1 | 7.1.x |
| siemens / simatic_pcs_7 | 6.0 | 6.0.x |
| siemens / simatic_pcs_7 | 7.1-sp1 | 7.1-sp1.x |
| siemens / simatic_pcs_7 | 6.1 | 6.1.x |
| siemens / simatic_pcs_7 | 7.0-sp1 | 7.0-sp1.x |
| siemens / simatic_pcs_7 | 7.0 | 7.0.x |