CVE-2013-3959 is an account enumeration vulnerability affecting the Web Navigator in Siemens WinCC before version 7.2 Update 1, including SIMATIC PCS7 8.0 SP1 and earlier. This vulnerability allows remote authenticated attackers to determine valid user accounts by observing differing responses to crafted URL parameters. With a CVSS score of 4.0, it is a low-severity issue, requiring authentication and having a partial impact on confidentiality (information disclosure) without affecting integrity or availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 8.0CPE matchmatch criteria | cpe:2.3:a:siemens:simatic_pcs7:*:sp1:*:*:*:*:*:* | ||
8.0CPE matchmatch criteria | cpe:2.3:a:siemens:simatic_pcs7:8.0:*:*:*:*:*:*:* | ||
<= 7.2CPE matchmatch criteria | cpe:2.3:a:siemens:wincc:*:*:*:*:*:*:*:* | ||
7.0CPE matchmatch criteria | cpe:2.3:a:siemens:wincc:7.0:*:*:*:*:*:*:* | ||
7.0CPE matchmatch criteria | cpe:2.3:a:siemens:wincc:7.0:sp1:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:S/C:P/I:N/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.