Unscored CVE-2014-1696 EUVD-2014-1770GHSA-p2vr-w26x-2355

Siemens SIMATIC WinCC OA before 3.12 P002 January uses a weak hash algorithm for passwords, which makes it easier for remote attackers to o…

Published Feb 7, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

Siemens SIMATIC WinCC OA before 3.12 P002 January uses a weak hash algorithm for passwords, which makes it easier for remote attackers to obtain access via a brute-force attack.

Advisories 1

ICSA-14-035-01 Siemens SIMATIC WinCC OA Multiple Vulnerabilities CISA ICS & IT advisories · Jun 9, 2025

References

simatic-wincc-cve20141696-priv-esc(90934) vdb-entry
102809 vdb-entry
http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-342587.pdf
http://ics-cert.us-cert.gov/advisories/ICSA-14-035-01