CVE-2013-0677: Infoleak
The web server in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote attackers to obtain sensitive information or cause a denial of service via a crafted project file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0677?
The severity of CVE-2013-0677 is considered high as it allows remote attackers to obtain sensitive information or cause a denial of service.
How do I fix CVE-2013-0677?
To fix CVE-2013-0677, ensure that you are using an updated version of Siemens WinCC or SIMATIC PCS7, specifically version 7.2 or later.
What products are affected by CVE-2013-0677?
CVE-2013-0677 affects Siemens WinCC versions up to and including 7.1 and SIMATIC PCS7 versions up to 8.0 SP1.
Can CVE-2013-0677 be exploited remotely?
Yes, CVE-2013-0677 can be exploited remotely by attackers through specially crafted project files.
What type of information can be exposed due to CVE-2013-0677?
CVE-2013-0677 may allow attackers to gain access to sensitive information stored within the affected Siemens software.