CVE-2010-2772: High severity Siemens SIMATIC WinCC vulnerability
Siemens Simatic WinCC and PCS 7 SCADA system uses a hard-coded password, which allows local users to access a back-end database and gain privileges, as demonstrated in the wild in July 2010 by the Stuxnet worm, a different vulnerability than CVE-2010-2568.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2772?
CVE-2010-2772 is considered critical due to its exploitation by the Stuxnet worm, which gained unauthorized access to SCADA systems.
How do I fix CVE-2010-2772?
To remediate CVE-2010-2772, change the hard-coded password used by the affected Siemens software and ensure proper authentication measures are in place.
Which Siemens products are affected by CVE-2010-2772?
CVE-2010-2772 affects Siemens Simatic WinCC versions 6.2 and 7.0, as well as Siemens SIMATIC PCS 7 versions 6.0, 6.1, 7.0, and 7.1.
Can CVE-2010-2772 be exploited remotely?
CVE-2010-2772 primarily requires local access to the affected systems for exploitation, making it less likely to pose a remote attack vector.
What are the implications of CVE-2010-2772 for organizations using the affected SCADA systems?
Organizations using the vulnerable Siemens SCADA systems risk unauthorized access and control over critical infrastructure, potentially leading to severe operational impacts.