CVE-2013-0679: Path Traversal
Published Mar 21, 2013
·Updated
Directory traversal vulnerability in the web server in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote authenticated users to read arbitrary files via vectors involving a query for a pathname.
Affected Software
13 affected components
Siemens SIMATIC PCS7<=8.0
Siemens SIMATIC PCS7=7.1-sp3
Siemens WinCC<=7.1
Siemens WinCC=5.0
Siemens WinCC=5.0-sp1
Siemens WinCC=6.0
Siemens WinCC=6.0-sp2
Siemens WinCC=6.0-sp3
Siemens WinCC=6.0-sp4
Siemens WinCC=7.0
Siemens WinCC=7.0-sp1
Siemens WinCC=7.0-sp2
Siemens WinCC=7.0-sp3
Event History
Mar 21, 2013
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-0679?
CVE-2013-0679 has been assigned a CVSS score of 6.4, indicating a medium severity level.
2
How do I fix CVE-2013-0679?
To fix CVE-2013-0679, update Siemens WinCC and SIMATIC PCS 7 to versions that address this vulnerability.
3
Who is affected by CVE-2013-0679?
CVE-2013-0679 affects remote authenticated users of Siemens WinCC prior to 7.2 and SIMATIC PCS 7 prior to 8.0 SP1.
4
What type of vulnerability is CVE-2013-0679?
CVE-2013-0679 is a directory traversal vulnerability that allows unauthorized file access.
5
Can CVE-2013-0679 be exploited remotely?
Yes, CVE-2013-0679 can be exploited by remote authenticated users to read arbitrary files on the server.