Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2015-1602

Siemens SIMATIC STEP 7 (TIA Portal) 12 and 13 before 13 SP1 Upd1 improperly stores password data within project files, which makes it easier for local users to determine cleartext (1) protection-level passwords or (2) web-server passwords by leveraging the ability to read these files.

  • Published: Apr 6, 2015
  • Updated: Apr 13, 2023
  • CVE: CVE-2015-1602
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 2.1
  • AV:L/AC:L/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
siemens / simatic_step_7 13.0 13.0.x
siemens / simatic_step_7 12.0 12.0.x
siemens / simatic_step_7 - 13.0.x