← Vulnerability feed

Vulnerability record · CVE-2012-3015 · published 26 July 2012

CVE-2012-3015: Siemens simatic pcs7 vulnerability

Siemens · Simatic Pcs7

Untrusted search path vulnerability in Siemens SIMATIC STEP7 before 5.5 SP1, as used in SIMATIC PCS7 7.1 SP3 and earlier and other products, allows local users to gain privileges via a Trojan horse DLL in a STEP7 project folder.

6.9 CVSS 2.0 Medium EPSS 0.46% · top 62.9%
6.9CVSS 2.0 base score
0.46%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
4References
16 Jun 2026Last modified by NVD

Description

Untrusted search path vulnerability in Siemens SIMATIC STEP7 before 5.5 SP1, as used in SIMATIC PCS7 7.1 SP3 and earlier and other products, allows local users to gain privileges via a Trojan horse DLL in a STEP7 project folder.

AV:L/AC:M/Au:N/C:C/I:C/A:C

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-110665.pdf Vendor Advisory
http://www.us-cert.gov/control_systems/pdf/ICSA-12-205-02.pdf US Government Resource
http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-110665.pdf Vendor Advisory
http://www.us-cert.gov/control_systems/pdf/ICSA-12-205-02.pdf US Government Resource

Track CVE-2012-3015 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2014-8551Siemens simatic pcs 7 code injection vulnerabilityThe WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before Update 2; SIMATIC PCS 7 7.1 through SP4, 8.0 through S…EPSS 5.3%8.8CVE-2023-25910Siemens simatic pcs 7 code injection vulnerabilityA vulnerability has been identified in SIMATIC PCS 7 (All versions < V9.1 SP2 UC04), SIMATIC S7-PM (All versions < V5.7 SP1 HF1), SIMATIC S7-PM (All …EPSS 1.0%8.2CVE-2020-7587Siemens opcenter execution discrete uncontrolled resource consumption vulnerabilityA vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcent…EPSS 2.5%8.2CVE-2017-12069Siemens simatic pcs7 xml external entity (xxe) vulnerabilityAn XXE vulnerability has been identified in OPC Foundation UA .NET Sample Code before 2017-03-21 and Local Discovery Server (LDS) before 1.03.367. Am…EPSS 2.9%7.8CVE-2021-42029Siemens simatic step 7 improper access control vulnerabilityA vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) V15 (All versions), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 5),…EPSS 0.24%7.8CVE-2020-7586Siemens simatic pcs 7 heap-based buffer overflow vulnerabilityA vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All …EPSS 0.42%7.8CVE-2020-7585Siemens simatic pcs 7 uncontrolled search path element vulnerabilityA vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All …EPSS 0.45%7.5CVE-2013-3957Siemens simatic pcs7 sql injection vulnerabilitySQL injection vulnerability in the login screen in the Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and earlie…EPSS 1.8%

Source: NIST National Vulnerability Database (record CVE-2012-3015), CISA KEV, FIRST EPSS (scores of 2026-09-30). This page is refreshed as NVD updates the record.