CVE-2013-3957: SQL Injection
SQL injection vulnerability in the login screen in the Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and earlier and other products, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-3957?
CVE-2013-3957 is classified as a high-severity vulnerability due to its potential for remote SQL command execution.
How do I fix CVE-2013-3957?
To fix CVE-2013-3957, upgrade to Siemens WinCC version 7.2 Update 1 or later, or to a version of SIMATIC PCS7 that is not vulnerable.
Which products are affected by CVE-2013-3957?
CVE-2013-3957 affects Siemens WinCC versions up to 7.2 and SIMATIC PCS7 versions 8.0 SP1 and earlier.
Can CVE-2013-3957 be exploited remotely?
Yes, CVE-2013-3957 can be exploited remotely by attackers to execute arbitrary SQL commands.
What type of vulnerability is CVE-2013-3957?
CVE-2013-3957 is an SQL injection vulnerability found in the login screen of Siemens WinCC.