CVE-2017-6871CWE-288

A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android (All versions before V1.0.2.2) and SIMATIC WinCC Sm@rtClient for Android Lite…

published August 8, 2017

CVSS
—
EPSS
0%
Percentile
23.2
In the wild
Unconfirmed
What it is

A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android (All versions before V1.0.2.2) and SIMATIC WinCC Sm@rtClient for Android Lite (All versions before V1.0.2.2). An attacker with physical access to an unlocked mobile device, that has the affected app running, could bypass the app's authentication mechanism under certain conditions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00317 · 23.2th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2017-08-08T00:00Z
EPSS history
Timeline
  • 08 AUG 00:00Z
    A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android (All versions before V1.0.2.2) and SIMATIC WinCC Sm@rtClient for Android Lite…
    cvelistv5