A vulnerability has been identified in SIMATIC WinCC (All versions < V7.5.2.13). Affected applications fail to set proper access rights for their installation folder if a non-default installation path was chosen during installation.
This could allow an authenticated local attacker to inject arbitrary code and escalate privileges.
This could allow an authenticated local attacker to inject arbitrary code and escalate privileges.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Siemens |
|
No data.
No data.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2023-35237 | A vulnerability has been identified in SIMATIC WinCC (All versions < V7.5.2.13). Affected applications fail to set proper access rights for their installation folder if a non-default installation path was chosen during installation. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Fri, 03 Jan 2025 02:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: siemens
Published:
Updated: 2025-01-03T01:43:13.277Z
Reserved: 2023-04-20T05:09:40.252Z
Link: CVE-2023-30897
Vulnrichment
Updated: 2024-08-02T14:37:15.531Z
NVD
Status : Modified
Published: 2023-06-13T09:15:17.703
Modified: 2024-11-21T08:01:01.513
Link: CVE-2023-30897
Redhat
No data.
OpenCVE Enrichment
No data.