CVE-2012-2597: Path Traversal
Published Jun 8, 2012
·Updated
Multiple directory traversal vulnerabilities in Siemens WinCC 7.0 SP3 before Update 2 allow remote authenticated users to read arbitrary files via a crafted parameter in a URL.
Affected Software
2 affected components
Siemens WinCC=7.0-sp3
Siemens WinCC=7.0-sp3
Event History
Jun 8, 2012
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2597?
CVE-2012-2597 has a medium severity rating as it allows remote authenticated users to perform directory traversal attacks.
2
How do I fix CVE-2012-2597?
To fix CVE-2012-2597, update Siemens WinCC to a version after 7.0 SP3 Update 2.
3
Who is affected by CVE-2012-2597?
CVE-2012-2597 affects users of Siemens WinCC 7.0 SP3 and Update 1 prior to Update 2.
4
What types of vulnerabilities does CVE-2012-2597 include?
CVE-2012-2597 includes multiple directory traversal vulnerabilities.
5
Can CVE-2012-2597 lead to unauthorized access?
Yes, CVE-2012-2597 can allow unauthorized access to arbitrary files on the system.