Unscored severity · published Mar 7, 2015
CVE-2015-1594
Untrusted search path vulnerability in Siemens SIMATIC ProSave before 13 SP1; SIMATIC CFC before 8.0 SP4 Upd9 and 8.1 before Upd1; SIMATIC STEP 7 before 5.5 SP1 HF2, 5.5 SP2…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Untrusted search path vulnerability in Siemens SIMATIC ProSave before 13 SP1; SIMATIC CFC before 8.0 SP4 Upd9 and 8.1 before Upd1; SIMATIC STEP 7 before 5.5 SP1 HF2, 5.5 SP2 before HF7, 5.5 SP3, and 5.5 SP4 before HF4; SIMOTION Scout before 4.4; and STARTER before 4.4 HF3 allows local users to gain privileges via a Trojan horse application file.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 35% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
Simatic Cfc · Siemens
through 8.0; 8.1 · source: NVD
SP
Simatic Prosave · Siemens
13.0 · source: NVD
SS
Simatic Step 7 · Siemens
through 5.5; 5.5; 5.5; 5.5 · source: NVD
SS
Simotion Scout · Siemens
through 4.3 · source: NVD
ST
Starter · Siemens
through 4.4 · source: NVD