A vulnerability has been identified in SIMATIC PCS 7 (All versions), SIMATIC WinCC (All versions < V7.5 SP2). Due to an insecure password verification process, an attacker could bypass the password protection set on protected files, thus being granted access to the protected content, circumventing authentication. Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10048 Reference (s):
- https://cert-portal.siemens.com/productcert/pdf/ssa-944678.pdf
- URL: https://cert-portal.siemens.com/productcert/pdf/ssa-944678.pdf