The Siemens SIMATIC WinCC Sm@rtClient and Sm@rtClient Lite applications before 01.00.01.00 for Android do not properly store passwords, which allows physically proximate attackers to obtain sensitive information via unspecified vectors.
References
Link | Resource |
---|---|
https://ics-cert.us-cert.gov/advisories/ICSA-15-202-02 | Third Party Advisory US Government Resource |
http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-267489.pdf | Patch Vendor Advisory |
http://www.securityfocus.com/bid/75981 | |
http://www.securitytracker.com/id/1033021 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2015-08-02 18:59
Updated : 2017-09-20 18:29
NVD link : CVE-2015-5084
Mitre link : CVE-2015-5084
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
siemens
- simatic_wincc_sm\@rtclient_lite
- simatic_wincc_sm\@rtclient