Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2010-2772

Siemens Simatic WinCC and PCS 7 SCADA system uses a hard-coded password, which allows local users to access a back-end database and gain privileges, as demonstrated in the wild in July 2010 by the Stuxnet worm, a different vulnerability than CVE-2010-2568.

Published

2010-07-22T05:43:58.250

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

CVSSv2 Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Access Vector: LOCAL
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

3.4

Impact Score

10.0

Weaknesses

Type: Primary
CWE-798

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	siemens	simatic_wincc	6.2	Yes
Application	siemens	simatic_wincc	7.0	Yes
Application	siemens	simatic_pcs_7	6.0	Yes
Application	siemens	simatic_pcs_7	6.1	Yes
Application	siemens	simatic_pcs_7	7.0	Yes
Application	siemens	simatic_pcs_7	7.0	Yes
Application	siemens	simatic_pcs_7	7.1	Yes
Application	siemens	simatic_pcs_7	7.1	Yes

References

http://ics-cert.us-cert.gov/advisories/ICSA-12-205-01 Third Party Advisory, US Government Resource ([email protected])
http://infoworld.com/d/security-central/new-weaponized-virus-targets-industrial-secrets-725 Press/Media Coverage ([email protected])
http://infoworld.com/d/security-central/siemens-warns-users-dont-change-passwords-after-worm-attack-915?sourcefssr Press/Media Coverage ([email protected])
http://krebsonsecurity.com/2010/07/experts-warn-of-new-windows-shortcut-flaw/ Press/Media Coverage ([email protected])
http://secunia.com/advisories/40682 Broken Link ([email protected])
http://support.automation.siemens.com/WW/llisapi.dll?func=cslib.csinfo&lang=en&objid=43876783&caller=viewhttp://support.automation.siemens.com/WW/llisapi.dll?func=cslib.csinfo&lang=en&objid=43876783&c Not Applicable ([email protected])
http://www.automation.siemens.com/forum/guests/PostShow.aspx?PostID=16127&16127&Language=en&PageIndex=1 Broken Link ([email protected])
http://www.f-secure.com/weblog/archives/00001987.html Third Party Advisory ([email protected])
http://www.sea.siemens.com/us/News/Industrial/Pages/WinCC_Update.aspx Broken Link, Vendor Advisory ([email protected])
http://www.securityfocus.com/bid/41753 Broken Link, Third Party Advisory, VDB Entry ([email protected])
http://www.vupen.com/english/advisories/2010/1893 Broken Link ([email protected])
http://www.wilderssecurity.com/showpost.php?p=1712134&postcount=22 Exploit, Issue Tracking ([email protected])
http://www.wired.com/threatlevel/2010/07/siemens-scada/ Press/Media Coverage, Third Party Advisory ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/60587 Third Party Advisory, VDB Entry ([email protected])
http://ics-cert.us-cert.gov/advisories/ICSA-12-205-01 Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://infoworld.com/d/security-central/new-weaponized-virus-targets-industrial-secrets-725 Press/Media Coverage (af854a3a-2127-422b-91ae-364da2661108)
http://infoworld.com/d/security-central/siemens-warns-users-dont-change-passwords-after-worm-attack-915?sourcefssr Press/Media Coverage (af854a3a-2127-422b-91ae-364da2661108)
http://krebsonsecurity.com/2010/07/experts-warn-of-new-windows-shortcut-flaw/ Press/Media Coverage (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/40682 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://support.automation.siemens.com/WW/llisapi.dll?func=cslib.csinfo&lang=en&objid=43876783&caller=viewhttp://support.automation.siemens.com/WW/llisapi.dll?func=cslib.csinfo&lang=en&objid=43876783&c Not Applicable (af854a3a-2127-422b-91ae-364da2661108)
http://www.automation.siemens.com/forum/guests/PostShow.aspx?PostID=16127&16127&Language=en&PageIndex=1 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://www.f-secure.com/weblog/archives/00001987.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.sea.siemens.com/us/News/Industrial/Pages/WinCC_Update.aspx Broken Link, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/41753 Broken Link, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2010/1893 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://www.wilderssecurity.com/showpost.php?p=1712134&postcount=22 Exploit, Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
http://www.wired.com/threatlevel/2010/07/siemens-scada/ Press/Media Coverage, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/60587 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)