Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Siemens SIMATIC STEP 7 (TIA Portal) before 14 uses an improper format for managing TIA project files during version updates, which makes it easier for local users to obtain sensitive configuration information via unspecified vectors.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Siemens SIMATIC STEP 7 安全漏洞
Vulnerability Description
Siemens SIMATIC STEP 7（TIA Portal）是德国西门子（Siemens）公司的一套用于SIMATIC控制器的编程软件。该软件提供PLC编程、设计选件包和先进的驱动器技术等。 Siemens SIMATIC STEP 7(TIA Portal) 13.010及之前的版本中存在安全漏洞，该漏洞源于在版本更新期间，程序对TIA项目文件使用不正确的格式。本地攻击者可利用该漏洞获取敏感的配置信息。
CVSS Information
N/A
Vulnerability Type
N/A