Unrated severityNVD Advisory· Published Feb 7, 2014· Updated Apr 29, 2026

CVE-2014-1696

Description

Siemens SIMATIC WinCC OA before 3.12 P002 January uses a weak hash algorithm for passwords, which makes it easier for remote attackers to obtain access via a brute-force attack.

Affected products

Siemens Foundation/Simatic Wincc Open Architecture
cpe:2.3:a:siemens:simatic_wincc_open_architecture:*:*:*:*:*:*:*:*
Range: <=3.12

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-342587.pdfnvdVendor Advisory
ics-cert.us-cert.gov/advisories/ICSA-14-035-01nvdUS Government Resource
osvdb.org/102809nvd
exchange.xforce.ibmcloud.com/vulnerabilities/90934nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000