NVD

Id
14215  
Name
CVE-2010-2772  
Description
Siemens Simatic WinCC and PCS 7 SCADA system uses a hard-coded password, which allows local users to access a back-end database and gain privileges, as demonstrated in the wild in July 2010 by the Stuxnet worm, a different vulnerability than CVE-2010-2568.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-07-22  
Modified Date
2013-05-20  
Seq
2010-2772  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
78620 14215 CVE-2010-2772 http://ics-cert.us-cert.gov/advisories/ICSA-12-205-01  View
78621 14215 CVE-2010-2772 http://infoworld.com/d/security-central/new-weaponized-virus-targets-industrial-secrets-725  View
78622 14215 CVE-2010-2772 http://infoworld.com/d/security-central/siemens-warns-users-dont-change-passwords-after-worm-attack-915?sourcefssr  View
78623 14215 CVE-2010-2772 http://krebsonsecurity.com/2010/07/experts-warn-of-new-windows-shortcut-flaw/  View
78624 14215 CVE-2010-2772 http://support.automation.siemens.com/WW/llisapi.dll?func=cslib.csinfo&lang=en&objid=43876783&caller=viewhttp://support.automation.siemens.com/WW/llisapi.dll?func=cslib.csinfo&lang=en&objid=43876783&c  View
78625 14215 CVE-2010-2772 http://www.automation.siemens.com/forum/guests/PostShow.aspx?PostID=16127&16127&Language=en&PageIndex=1  View
78626 14215 CVE-2010-2772 http://www.f-secure.com/weblog/archives/00001987.html  View
78627 14215 CVE-2010-2772 http://www.sea.siemens.com/us/News/Industrial/Pages/WinCC_Update.aspx  View
78628 14215 CVE-2010-2772 41753  View
78629 14215 CVE-2010-2772 ADV-2010-1893  View
78630 14215 CVE-2010-2772 http://www.wilderssecurity.com/showpost.php?p=1712134&postcount=22  View
78631 14215 CVE-2010-2772 http://www.wired.com/threatlevel/2010/07/siemens-scada/  View
78632 14215 CVE-2010-2772 simatic-wincc-default-password(60587)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36049 JVNDB-2010-001829 Siemens Simatic WinCC および Simatic PCS 7 の SCADA システムにおける権限を取得される脆弱性 Siemens Simatic WinCC および Simatic PCS 7 の SCADA システムには、ハードコーディングされたパスワードが使用されるため、バックエンドのデータベースにアクセスされ、権限を取得される脆弱性が存在します。 CVE-2010-2772 45352 CVE-2010-2772 14215 6.9 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001829.html 2010-07-22 2013-06-26 View