Critical severity9.0NVD Advisory· Published Feb 22, 2017· Updated May 13, 2026
CVE-2017-2684
CVE-2017-2684
Description
Siemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow an attacker with knowledge of a valid user name, and physical or network access to the affected system, to bypass the application-level authentication.
Affected products
1- cpe:2.3:a:siemens:simatic_logon:*:sp3_update_1:*:*:*:*:*:*Range: <=1.5
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.securityfocus.com/bid/96208nvdThird Party AdvisoryVDB Entry
- www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-931064.pdfnvdVendor Advisory
News mentions
0No linked articles in our index yet.