CVE-2015-1594: Medium severity siemens starter vulnerability
Untrusted search path vulnerability in Siemens SIMATIC ProSave before 13 SP1; SIMATIC CFC before 8.0 SP4 Upd9 and 8.1 before Upd1; SIMATIC STEP 7 before 5.5 SP1 HF2, 5.5 SP2 before HF7, 5.5 SP3, and 5.5 SP4 before HF4; SIMOTION Scout before 4.4; and STARTER before 4.4 HF3 allows local users to gain privileges via a Trojan horse application file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1594?
CVE-2015-1594 has been classified as a moderate severity vulnerability.
How do I fix CVE-2015-1594?
To mitigate CVE-2015-1594, update to the latest versions of the affected Siemens software as recommended by Siemens.
What software is affected by CVE-2015-1594?
CVE-2015-1594 affects multiple Siemens software including SIMATIC ProSave, SIMATIC CFC, SIMATIC STEP 7, SIMOTION Scout, and STARTER.
Can local users exploit CVE-2015-1594?
Yes, CVE-2015-1594 allows local users to exploit the vulnerability due to an untrusted search path issue.
Is CVE-2015-1594 specific to a certain version of Siemens software?
Yes, CVE-2015-1594 specifically affects certain versions of Siemens software prior to their respective updates.