CVE-2015-1594: siemens simatic_cfc
Vulnerability summary
CVE-2015-1594 is a medium (CVSS 6.9) vulnerability in siemens simatic_cfc. EPSS estimates a 0.40% chance of exploitation in the next 30 days, higher than 33.3% of scored vulnerabilities.
Timeline
- 07-03-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Untrusted search path vulnerability in Siemens SIMATIC ProSave before 13 SP1; SIMATIC CFC before 8.0 SP4 Upd9 and 8.1 before Upd1; SIMATIC STEP 7 before 5.5 SP1 HF2, 5.5 SP2 before HF7, 5.5 SP3, and 5.5 SP4 before HF4; SIMOTION Scout before 4.4; and STARTER before 4.4 HF3 allows local users to gain privileges via a Trojan horse application file.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.40%
Chance of exploitation in the next 30 days
Percentile
33%
Versus all other CVEs
30-day change
0.00 pp
From 0.40% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Siemens5 products
- simatic_cfc≤ 8.0 | 8.1
- simatic_prosave13.0
- simatic_step_7≤ 5.5 | 5.5:sp2 | 5.5:sp3 | 5.5:sp4
- simotion_scout≤ 4.3
- starter≤ 4.4
1 vendor · 5 products
References
2 links- www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-451236.pdfX Refsource CONFIRMVendor Advisory