CVE-2015-1602: Siemens SIMATIC Step 7

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Siemens SIMATIC STEP 7 (TIA Portal) 12 and 13 before 13 SP1 Upd1 improperly stores password data within project files, which makes it easier for local users to determine cleartext (1) protection-level passwords or (2) web-server passwords by leveraging the ability to read these files.

Affected products

• Siemens SIMATIC Step 7: up to and including 13.0; version 12.0 only; version 13.0 only

Published 2015-04-06. Last modified 2026-06-17.