Unrated severityNVD Advisory· Published Jul 26, 2012· Updated Apr 29, 2026

CVE-2012-3015

Description

Untrusted search path vulnerability in Siemens SIMATIC STEP7 before 5.5 SP1, as used in SIMATIC PCS7 7.1 SP3 and earlier and other products, allows local users to gain privileges via a Trojan horse DLL in a STEP7 project folder.

Affected products

Siemens Foundation/Simatic Pcs7
cpe:2.3:a:siemens:simatic_pcs7:*:sp3:*:*:*:*:*:*
Range: <=7.1
Siemens Foundation/Simatic Step 7
cpe:2.3:a:siemens:simatic_step_7:*:*:*:*:*:*:*:*
Range: <=5.5

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-110665.pdfnvdVendor Advisory
www.us-cert.gov/control_systems/pdf/ICSA-12-205-02.pdfnvdUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000