Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability has been identified in SIMATIC WinCC (All versions < V7.5.2.13). Affected applications fail to set proper access rights for their installation folder if a non-default installation path was chosen during installation. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
关键资源的不正确权限授予
Vulnerability Title
Siemens SIMATIC WinCC 安全漏洞
Vulnerability Description
Siemens SIMATIC WinCC是德国西门子（Siemens）公司的一套自动化的数据采集与监控（SCADA）系统。 Siemens SIMATIC WinCC 存在安全漏洞，该漏洞源于如果在安装过程中选择了非默认安装路径，受影响的应用程序将无法为其安装文件夹设置正确的访问权限。
CVSS Information
N/A
Vulnerability Type
N/A