CVE-2015-5084

Description

The Siemens SIMATIC WinCC Sm@rtClient and Sm@rtClient Lite applications before 01.00.01.00 for Android do not properly store passwords, which allows physically proximate attackers to obtain sensitive information via unspecified vectors.

References

https://ics-cert.us-cert.gov/advisories/ICSA-15-202-02

http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-267489.pdf

http://www.securitytracker.com/id/1033021

http://www.securityfocus.com/bid/75981

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS