CVE-2012-3034: Siemens SIMATIC PCS7

Medium severity, CVSS 4.3. EPSS: 2.2% chance of exploitation in the next 30 days.

WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to discover a username and password via crafted parameters to unspecified methods in ActiveX controls.

Affected products

• Siemens SIMATIC PCS7: version 8.0 only
• Siemens Wincc: up to and including 7.0; version 5.0 only; version 6.0 only; version 7.0 only

Published 2012-09-18. Last modified 2026-06-16.