CVE-2012-2597: Siemens Wincc

Medium severity, CVSS 4.0. EPSS: 2.3% chance of exploitation in the next 30 days.

Multiple directory traversal vulnerabilities in Siemens WinCC 7.0 SP3 before Update 2 allow remote authenticated users to read arbitrary files via a crafted parameter in a URL.

Affected products

• Siemens Wincc: version 7.0 only

Published 2012-06-08. Last modified 2026-06-16.