cve.bz

CVE-2017-2684

9.0 criticalEPSS 2.0%

Critical (9.0) in siemens simatic logon. EPSS 2.0% chance of exploitation in the next 30 days.

Siemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow an attacker with knowledge of a valid user name, and physical or network access to the affected system, to bypass the application-level authentication.

Severity

CVSS 3.0

9.0 critical
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS
2.0% chance of exploitation in the next 30 days; higher than 80% of CVEs (scores of 2026-10-31)
CWE
CWE-592
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON