VULNERABILITY INTELLIGENCE

CVE-2013-0676

CVSS score4 MEDIUM

EPSS probability1.53%

CISA KEVNot currently listed

Published2013-03-21

Last modified2026-06-16

CVSS vectorAV:N/AC:L/Au:S/C:P/I:N/A:N

Description

Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, does not properly assign privileges for the database containing WebNavigator credentials, which allows remote authenticated users to obtain sensitive information via a SQL query.

Primary references

ics-cert@hq.dhs.gov — US Government Resource
ics-cert@hq.dhs.gov — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory