CVE-2016-7960: Infoleak
Siemens SIMATIC STEP 7 (TIA Portal) before 14 uses an improper format for managing TIA project files during version updates, which makes it easier for local users to obtain sensitive configuration information via unspecified vectors.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-7960?
CVE-2016-7960 is considered a high severity vulnerability that can lead to exposure of sensitive configuration information.
How do I fix CVE-2016-7960?
To fix CVE-2016-7960, users should upgrade to Siemens SIMATIC STEP 7 version 14 or higher.
What are the potential impacts of CVE-2016-7960?
The potential impacts of CVE-2016-7960 include unauthorized access to sensitive configuration data by local users.
Which versions of Siemens SIMATIC STEP 7 are affected by CVE-2016-7960?
CVE-2016-7960 affects Siemens SIMATIC STEP 7 versions prior to 14, specifically up to 13.010.
Who is affected by CVE-2016-7960?
Local users of affected versions of Siemens SIMATIC STEP 7 prior to version 14 are at risk due to CVE-2016-7960.