Threats tagged 'ghsa-hjvw-f7fg-x3r9'

A vulnerability exists in multiple Siemens SIMATIC products across all versions that improperly secure remote user authentication by relying on the deprecated NTLM protocol. This flaw allows unauthenticated remote attackers positioned as a man-in-the-middle to relay NTLM authentication and impersonate legitimate users. The impact depends on accessible services, such as SQL servers used by WinCC. The vulnerability has a high severity score of 7.5 CVSS v3.1.