Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9fjf-27f3-w5w8

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android (All versions before V1.0.2.2) and SIMATIC WinCC Sm@rtClient for Android Lite (All versions before V1.0.2.2). An attacker with physical access to an unlocked mobile device, that has the affected app running, could bypass the app's authentication mechanism under certain conditions.

A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android (All versions before V1.0.2.2) and SIMATIC WinCC Sm@rtClient for Android Lite (All versions before V1.0.2.2). An attacker with physical access to an unlocked mobile device, that has the affected app running, could bypass the app's authentication mechanism under certain conditions.

EPSS

Процентиль: 18%
0.00059
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-287
CWE-288

Связанные уязвимости

CVSS3: 5.4
nvd
больше 8 лет назад

A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android (All versions before V1.0.2.2) and SIMATIC WinCC Sm@rtClient for Android Lite (All versions before V1.0.2.2). An attacker with physical access to an unlocked mobile device, that has the affected app running, could bypass the app's authentication mechanism under certain conditions.

EPSS

Процентиль: 18%
0.00059
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-287
CWE-288