CVE-2014-4686

The Project administration application in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, has a hardcoded encryption key, which allows…

published July 24, 2014

CVSS
—
EPSS
1%
Percentile
64.8
In the wild
Unconfirmed
What it is

The Project administration application in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, has a hardcoded encryption key, which allows remote attackers to obtain sensitive information by extracting this key from another product installation and then employing this key during the sniffing of network traffic on TCP port 1030.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01087 · 64.8th percentile
Published
2014-07-24T14:00Z
EPSS history
Timeline
  • 24 JUL 14:00Z
    The Project administration application in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, has a hardcoded encryption key, which allows…
    cvelistv5