VULNERABILITY INTELLIGENCE

CVE-2012-3015

CVSS score6.9 MEDIUM

EPSS probability0.45%

CISA KEVNot currently listed

Published2012-07-26

Last modified2026-06-16

CVSS vectorAV:L/AC:M/Au:N/C:C/I:C/A:C

Description

Untrusted search path vulnerability in Siemens SIMATIC STEP7 before 5.5 SP1, as used in SIMATIC PCS7 7.1 SP3 and earlier and other products, allows local users to gain privileges via a Trojan horse DLL in a STEP7 project folder.

Primary references

ics-cert@hq.dhs.gov — Vendor Advisory
ics-cert@hq.dhs.gov — US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — US Government Resource