Simatic Wincc Sm@rtclient

simatic_wincc_sm@rtclient

Vendor: Siemens • 6 CVEs

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-6871 1Siemens 2Simatic Wincc Sm@rtclient Simatic Wincc Sm@rtclient Lite May 13, 2026 Aug 8, 2017 N/A· v4 5.4 MEDIUM· v3 4.6 MEDIUM· v2 A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android (All versions before V1.0.2.2) and SIMATIC WinCC Sm@rtClient for Android Lite (All versions before V1.0.2.2). An attacker with physical acce...Show more A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android (All versions before V1.0.2.2) and SIMATIC WinCC Sm@rtClient for Android Lite (All versions before V1.0.2.2). An attacker with physical access to an unlocked mobile device, that has the affected app running, could bypass the app's authentication mechanism under certain conditions.Show less
CVE-2017-6870 1Siemens 1Simatic Wincc Sm@rtclient May 13, 2026 Aug 8, 2017 N/A· v4 7.4 HIGH· v3 5.8 MEDIUM· v2 A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android (All versions before V1.0.2.2). The existing TLS protocol implementation could allow an attacker to read and modify data within a TLS sessio...Show more A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android (All versions before V1.0.2.2). The existing TLS protocol implementation could allow an attacker to read and modify data within a TLS session while performing a Man-in-the-Middle (MitM) attack.Show less
CVE-2015-5084 1Siemens 2Simatic Wincc Sm@rtclient Simatic Wincc Sm@rtclient Lite May 6, 2026 Aug 3, 2015 N/A· v4 N/A· v3 2.1 LOW· v2 The Siemens SIMATIC WinCC Sm@rtClient and Sm@rtClient Lite applications before 01.00.01.00 for Android do not properly store passwords, which allows physically proximate attackers to obtain sensitive information via unsp...Show more The Siemens SIMATIC WinCC Sm@rtClient and Sm@rtClient Lite applications before 01.00.01.00 for Android do not properly store passwords, which allows physically proximate attackers to obtain sensitive information via unspecified vectors.Show less
CVE-2014-5233 1Siemens 1Simatic Wincc Sm@rtclient May 6, 2026 Jan 14, 2015 N/A· v4 N/A· v3 1.9 LOW· v2 The Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows physically proximate attackers to discover Sm@rtServer credentials by leveraging an error in the credential-processing mechanism.
CVE-2014-5232 1Siemens 1Simatic Wincc Sm@rtclient May 6, 2026 Jan 14, 2015 N/A· v4 N/A· v3 1.9 LOW· v2 The Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows local users to bypass an intended application-password requirement by leveraging the running of the app in the background state.
CVE-2014-5231 1Siemens 1Simatic Wincc Sm@rtclient May 6, 2026 Jan 14, 2015 N/A· v4 N/A· v3 2.1 LOW· v2 The Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows physically proximate attackers to extract the password from storage via unspecified vectors.