CVE-2015-1594
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
07/03/2015
Last modified:
12/04/2025
Description
Untrusted search path vulnerability in Siemens SIMATIC ProSave before 13 SP1; SIMATIC CFC before 8.0 SP4 Upd9 and 8.1 before Upd1; SIMATIC STEP 7 before 5.5 SP1 HF2, 5.5 SP2 before HF7, 5.5 SP3, and 5.5 SP4 before HF4; SIMOTION Scout before 4.4; and STARTER before 4.4 HF3 allows local users to gain privileges via a Trojan horse application file.
Impact
Base Score 2.0
6.90
Severity 2.0
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:siemens:starter:*:*:*:*:*:*:*:* | 4.4 (including) | |
| cpe:2.3:a:siemens:simatic_prosave:13.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:siemens:simotion_scout:*:sp1:*:*:*:*:*:* | 4.3 (including) | |
| cpe:2.3:a:siemens:simatic_cfc:*:sp4:*:*:*:*:*:* | 8.0 (including) | |
| cpe:2.3:a:siemens:simatic_cfc:8.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:siemens:simatic_step_7:*:sp1:*:*:*:*:*:* | 5.5 (including) | |
| cpe:2.3:a:siemens:simatic_step_7:5.5:sp2:*:*:*:*:*:* | ||
| cpe:2.3:a:siemens:simatic_step_7:5.5:sp3:*:*:*:*:*:* | ||
| cpe:2.3:a:siemens:simatic_step_7:5.5:sp4:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page