CVE-2017-2684 Siemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow an attacker with knowledge of a valid user name, and physical or network access to the affected system, to bypass the application-level aut...
CriticalCVSS 9.0
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Siemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow an attacker with knowledge of a valid user name, and physical or network access to the affected system, to bypass the application-level authentication.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Siemens simatic logon | <= 1.5 | No fix listed |
References
- 96208 third-party-advisory vdb-entry
- www.siemens.com vendor-advisory