Description
The login implementation in the Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and earlier and other products, has a hardcoded account, which makes it easier for remote attackers to obtain access via an unspecified request.
Advisories 1
- ICSA-13-169-02 Siemens WinCC 7.2 Multiple Vulnerabilities CISA ICS & IT advisories · Jun 6, 2025