CVE-2015-1594

mediumPriorität · verfolgen · 28EPSS 0.004 · 35. PerzentilEUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
0.40% (35th) EPSS
CVSS 6.9 · medium
Is it mine?
38 products
Prüfe deine Angriffsfläche
Who says so?
3 sources
cnnvd · enisa_euvd · cisa_csaf_ot

EPSS · bewertet 2026-10-27

Untrusted search path vulnerability in Siemens SIMATIC ProSave before 13 SP1; SIMATIC CFC before 8.0 SP4 Upd9 and 8.1 before Upd1; SIMATIC STEP 7 before 5.5 SP1 HF2, 5.5 SP2 before HF7, 5.5 SP3, and 5.5 SP4 before HF4; SIMOTION Scout before 4.4; and STARTER before 4.4 HF3 allows local users to gain privileges via a Trojan horse application file.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.

  • MitigationCFC V8.0 SP4cisa_csaf_ot

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationCFC V8.1cisa_csaf_ot

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationPCS 7 V8.0 SP2cisa_csaf_ot

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationPCS 7 with STEP 7 CFC V8.1 Upd1cisa_csaf_ot

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationPCS 7 with STEP 7 SP4 HF4cisa_csaf_ot

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationSIMATIC CFCcisa_csaf_ot

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationSIMATIC PCS 7 (as STEP 7 and CFC are incorporated)cisa_csaf_ot

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationSIMATIC ProSavecisa_csaf_ot

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationSIMATIC STEP 7 V5.5cisa_csaf_ot

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationSIMOTION Scoutcisa_csaf_ot

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationSTARTERcisa_csaf_ot

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationSTEP 7 V5.5 SP1cisa_csaf_ot

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationSTEP 7 V5.5 SP2cisa_csaf_ot

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationSTEP 7 V5.5 SP3cisa_csaf_ot

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationSTEP 7 V5.5 SP4cisa_csaf_ot

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

6.9
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v2.06.9mediumAV:L/AC:M/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USAusnutzbarkeit 3.4 · Auswirkung 10
v2.06.9mediumAV:L/AC:M/Au:N/C:C/I:C/A:Csecondary · CISA US
v2.05.9mediumAV:L/AC:M/Au:N/C:C/I:C/A:C/E:Usecondary · CVSS-BT (t0sche)
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-426US
04

betroffene Produkte (38)

Betroffene Produkte und Versionsbereiche.

20 von 38 angezeigt
05

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

  • ICSA-15-064-02Siemens SIMATIC ProSave, SIMATIC CFC, SIMATIC STEP 7, SIMOTION Scout, and STARTER Insufficiently Qualified Paths2015-12-06icsa · cisa_csaf_otUS

    This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

  • ICSA-15-064-02ASiemens SIMATIC ProSave, SIMATIC CFC, SIMATIC STEP 7, SIMOTION Scout, and STARTER Insufficiently Qualified Paths (Update A)2015-12-06icsa · cisa_csaf_otUS

    This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

06

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

07

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdcisa_csaf_otNVDCVE.orgMITRE
veröffentlicht 2015-03-07geändert 2026-06-17
08

Referenzen (5)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan