CVE-2010-2772

Description

Siemens Simatic WinCC and PCS 7 SCADA system uses a hard-coded password, which allows local users to access a back-end database and gain privileges, as demonstrated in the wild in July 2010 by the Stuxnet worm, a different vulnerability than CVE-2010-2568.

Weakness classification

• CWE-798: Use of Hard-coded Credentials

Primary references

• cve@mitre.org — Third Party Advisory, US Government Resource
• cve@mitre.org — Press/Media Coverage
• cve@mitre.org — Press/Media Coverage
• cve@mitre.org — Press/Media Coverage
• cve@mitre.org — Broken Link
• cve@mitre.org — Not Applicable
• cve@mitre.org — Broken Link
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Broken Link, Vendor Advisory
• cve@mitre.org — Broken Link, Third Party Advisory, VDB Entry
• cve@mitre.org — Broken Link
• cve@mitre.org — Exploit, Issue Tracking