NVD

Id
30273  
Name
CVE-2014-1696  
Description
Siemens SIMATIC WinCC OA before 3.12 P002 January uses a weak hash algorithm for passwords, which makes it easier for remote attackers to obtain access via a brute-force attack.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2014-02-06  
Modified Date
2014-02-21  
Seq
2014-1696  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
160239 30273 CVE-2014-1696 http://ics-cert.us-cert.gov/advisories/ICSA-14-035-01  View
160240 30273 CVE-2014-1696 http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-342587.pdf  View
160241 30273 CVE-2014-1696 simatic-wincc-cve20141696-priv-esc(90934)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12464 JVNDB-2014-001339 Siemens SIMATIC WinCC OA におけるアクセス権を取得される脆弱性 Siemens SIMATIC WinCC OA は、パスワードに対して脆弱なハッシュアルゴリズムを使用するため、アクセス権を取得される脆弱性が存在します。 CVE-2014-1696 68983 CVE-2014-1696 30273 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001339.html 2014-02-03 2014-02-10 View