CVE-2017-6871CWE-288

CVE-2017-6871: vulnerability in SIMATIC WinCC Sm@rtClient for Android, SIMATIC…

Published · Updated

Follow this CVE+ Monitor SIMATIC WinCC Sm@rtClient for Android, SIMATIC WinCC Sm@rtClient Lite

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.3%
A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android (All versions before V1.0.2.2) and SIMATIC WinCC Sm@rtClient for Android Lite (All versions before V1.0.2.2). An attacker with physical access to an unlocked mobile device, that has the affected app running, could bypass the app's authentication mechanism under certain conditions.
Affected products
n/a · SIMATIC WinCC Sm@rtClient for Android, SIMATIC WinCC Sm@rtClient Lite for Android