Riskcovery

CVE-2017-6871

State
Published
Severity
Not scored
Published
Aug 8, 2017
Updated
Aug 5, 2024
Reserved
Mar 13, 2017

Read the record on cve.org

Description

A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android (All versions before V1.0.2.2) and SIMATIC WinCC Sm@rtClient for Android Lite (All versions before V1.0.2.2). An attacker with physical access to an unlocked mobile device, that has the affected app running, could bypass the app's authentication mechanism under certain conditions.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-288 Authentication Bypass Using an Alternate Path or Channel

Affected Products

ProductVersions
SIMATIC WinCC Sm@rtClient for Android, SIMATIC WinCC Sm@rtClient Lite for Androidn/a
  • SIMATIC WinCC Sm@rtClient for Android, SIMATIC WinCC Sm@rtClient Lite for AndroidAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.