CVE-2015-1594

Severity Score

6.9

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Untrusted search path vulnerability in Siemens SIMATIC ProSave before 13 SP1; SIMATIC CFC before 8.0 SP4 Upd9 and 8.1 before Upd1; SIMATIC STEP 7 before 5.5 SP1 HF2, 5.5 SP2 before HF7, 5.5 SP3, and 5.5 SP4 before HF4; SIMOTION Scout before 4.4; and STARTER before 4.4 HF3 allows local users to gain privileges via a Trojan horse application file.

Vulnerabilidad de ruta de búsqueda no confiable en Siemens SIMATIC ProSave anterior a 13 SP1; SIMATIC CFC anterior a 8.0 SP4 Upd9 y 8.1 anterior a Upd1; SIMATIC STEP 7 anterior a 5.5 SP1 HF2, 5.5 SP2 anterior a HF7, 5.5 SP3, y 5.5 SP4 anterior a HF4; SIMOTION Scout anterior a 4.4; y STARTER anterior a 4.4 HF3 permite a usuarios locales ganar privilegios a través de un fichero de aplicaciones troyano.

*Credits: N/A

CVSS Scores

NISTv2 6.9

Attack Vector

Local

Attack Complexity

Medium

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2015-02-13 CVE Reserved
2015-03-07 CVE Published
2023-03-08 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (2)

URL	Tag	Source
http://www.securitytracker.com/id/1032039	Third Party Advisory

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-451236.pdf	2016-08-24

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Siemens Search vendor "Siemens"		Starter Search vendor "Siemens" for product "Starter"				<= 4.4 Search vendor "Siemens" for product "Starter" and version " <= 4.4"		-		Affected
Siemens Search vendor "Siemens"		Simatic Prosave Search vendor "Siemens" for product "Simatic Prosave"				13.0 Search vendor "Siemens" for product "Simatic Prosave" and version "13.0"		-		Affected
Siemens Search vendor "Siemens"		Simotion Scout Search vendor "Siemens" for product "Simotion Scout"				<= 4.3 Search vendor "Siemens" for product "Simotion Scout" and version " <= 4.3"		sp1		Affected
Siemens Search vendor "Siemens"		Simatic Cfc Search vendor "Siemens" for product "Simatic Cfc"				<= 8.0 Search vendor "Siemens" for product "Simatic Cfc" and version " <= 8.0"		sp4		Affected
Siemens Search vendor "Siemens"		Simatic Cfc Search vendor "Siemens" for product "Simatic Cfc"				8.1 Search vendor "Siemens" for product "Simatic Cfc" and version "8.1"		-		Affected
Siemens Search vendor "Siemens"		Simatic Step 7 Search vendor "Siemens" for product "Simatic Step 7"				<= 5.5 Search vendor "Siemens" for product "Simatic Step 7" and version " <= 5.5"		sp1		Affected
Siemens Search vendor "Siemens"		Simatic Step 7 Search vendor "Siemens" for product "Simatic Step 7"				5.5 Search vendor "Siemens" for product "Simatic Step 7" and version "5.5"		sp2		Affected
Siemens Search vendor "Siemens"		Simatic Step 7 Search vendor "Siemens" for product "Simatic Step 7"				5.5 Search vendor "Siemens" for product "Simatic Step 7" and version "5.5"		sp3		Affected
Siemens Search vendor "Siemens"		Simatic Step 7 Search vendor "Siemens" for product "Simatic Step 7"				5.5 Search vendor "Siemens" for product "Simatic Step 7" and version "5.5"		sp4		Affected