CVE

Id
93985  
CVE No.
CVE-2016-7165  
Status
Candidate  
Description
Unquoted Windows search path vulnerability in Siemens SIMATIC WinCC before 7.0 SP2 Upd 12, 7.0 SP3 before Upd 8, and 7.2 through 7.4; SIMATIC WinCC (TIA Portal) Basic, Comfort, Advanced before 14; SIMATIC WinCC Runtime Professional; SIMATIC WinCC (TIA Portal) Professional; SIMATIC STEP 7 5.x; SIMATIC STEP 7 (TIA Portal) before 14; SIMATIC NET PC-Software before 14; TeleControl Server Basic before 3.0 SP2; SINEMA Server before 13 SP2; SIMATIC PCS 7 through 8.2; SINEMA Remote Connect Client; SIMATIC WinAC RTX 2010 SP2; SIMATIC WinAC RTX F 2010 SP2; SIMATIC IT Production Suite; SOFTNET Security Client 5.0; SIMIT 9.0; Security Configuration Tool (SCT); and Primary Setup Tool (PST), when the installation does not use the %PROGRAMFILES% directory, might allow local users to gain privileges via a Trojan horse executable file.  
Phase
Assigned (20160908)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
795231 93985 CVE-2016-7165 MISC:https://ics-cert.us-cert.gov/advisories/ICSA-16-313-02  View
795232 93985 CVE-2016-7165 MISC:http://securityaffairs.co/wordpress/53266/security/cve-2016-7165-siemens.html  View
795233 93985 CVE-2016-7165 CONFIRM:http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-701708.pdf  View
795234 93985 CVE-2016-7165 BID:94158  View

Related JVN