Description
Siemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow an attacker with knowledge of a valid user name, and physical or network access to the affected system, to bypass the application-level authentication.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | SIMATIC Logon All versions < V1.5 SP3 Update 2 | SIMATIC Logon All versions < V1.5 SP3 Update 2 | — |
Advisories 1
- ICSA-17-045-03 ICSA-17-045-03 Siemens SIMATIC Authentication Bypass (Update D) CISA ICS & IT advisories · Jun 12, 2018