CVE-2012-3020

The Siemens Synco OZW Web Server devices OZW672.*, OZW772.*, and OZW775 with firmware before 4 have an unspecified default password, which makes it easier for remote attackers to obtain administrative access via a network session.

🔗 References (4)

• ics-cert@hqhttp://support.automation.siemens.com/WW/view/en/41929231/130000
• ics-cert@hqhttp://www.us-cert.gov/control_systems/pdf/ICSA-12-214-01.pdf
• af854a3a-2127-422b-91ae-364da2661108http://support.automation.siemens.com/WW/view/en/41929231/130000
• af854a3a-2127-422b-91ae-364da2661108http://www.us-cert.gov/control_systems/pdf/ICSA-12-214-01.pdf