CVE-2012-3015: Siemens SIMATIC PCS7

Medium severity, CVSS 6.9. EPSS: 0.5% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in Siemens SIMATIC STEP7 before 5.5 SP1, as used in SIMATIC PCS7 7.1 SP3 and earlier and other products, allows local users to gain privileges via a Trojan horse DLL in a STEP7 project folder.

Affected products

• Siemens SIMATIC PCS7: up to and including 7.1
• Siemens SIMATIC Step 7: up to and including 5.5

Published 2012-07-26. Last modified 2026-06-16.