CVE-2015-1594

mediumpriority · track · 28EPSS 0.004 · 35 %ileEUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
0.40% (35th) EPSS
CVSS 6.9 · medium
Is it mine?
38 products
Check your exposure
Who says so?
3 sources
cnnvd · enisa_euvd · cisa_csaf_ot

EPSS · scored 2026-10-27

Untrusted search path vulnerability in Siemens SIMATIC ProSave before 13 SP1; SIMATIC CFC before 8.0 SP4 Upd9 and 8.1 before Upd1; SIMATIC STEP 7 before 5.5 SP1 HF2, 5.5 SP2 before HF7, 5.5 SP3, and 5.5 SP4 before HF4; SIMOTION Scout before 4.4; and STARTER before 4.4 HF3 allows local users to gain privileges via a Trojan horse application file.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

No vendor fix yet; a mitigation is available.

  • MitigationCFC V8.0 SP4cisa_csaf_ot

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationCFC V8.1cisa_csaf_ot

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationPCS 7 V8.0 SP2cisa_csaf_ot

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationPCS 7 with STEP 7 CFC V8.1 Upd1cisa_csaf_ot

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationPCS 7 with STEP 7 SP4 HF4cisa_csaf_ot

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationSIMATIC CFCcisa_csaf_ot

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationSIMATIC PCS 7 (as STEP 7 and CFC are incorporated)cisa_csaf_ot

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationSIMATIC ProSavecisa_csaf_ot

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationSIMATIC STEP 7 V5.5cisa_csaf_ot

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationSIMOTION Scoutcisa_csaf_ot

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationSTARTERcisa_csaf_ot

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationSTEP 7 V5.5 SP1cisa_csaf_ot

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationSTEP 7 V5.5 SP2cisa_csaf_ot

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationSTEP 7 V5.5 SP3cisa_csaf_ot

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

  • MitigationSTEP 7 V5.5 SP4cisa_csaf_ot

    For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-451236 at the following location: http://www.siemens.com/cert/advisories

02

cvss

Technical severity, 0–10. One row per scoring source.

6.9
010

base score 0–10 · higher = more severe · hover a vector to decode

v2.06.9mediumAV:L/AC:M/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USexploitability 3.4 · impact 10
v2.06.9mediumAV:L/AC:M/Au:N/C:C/I:C/A:Csecondary · CISA US
v2.05.9mediumAV:L/AC:M/Au:N/C:C/I:C/A:C/E:Usecondary · CVSS-BT (t0sche)
03

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-426US
04

affected products (38)

Products and version ranges known to be affected.

showing 20 of 38
05

advisories (2)

Vendor and ecosystem advisories describing this.

  • ICSA-15-064-02Siemens SIMATIC ProSave, SIMATIC CFC, SIMATIC STEP 7, SIMOTION Scout, and STARTER Insufficiently Qualified Paths2015-12-06icsa · cisa_csaf_otUS

    This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

  • ICSA-15-064-02ASiemens SIMATIC ProSave, SIMATIC CFC, SIMATIC STEP 7, SIMOTION Scout, and STARTER Insufficiently Qualified Paths (Update A)2015-12-06icsa · cisa_csaf_otUS

    This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

06

also known as (3)

Other names and identifiers for this entity.

07

sources

Which sources assert this record, and when.

cnnvdenisa_euvdcisa_csaf_otNVDCVE.orgMITRE
published 2015-03-07modified 2026-06-17
08

references (5)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan