CVE-2014-4685 Information

Description

Siemens SIMATIC WinCC before 7.3 as used in PCS7 and other products allows local users to gain privileges by leveraging weak system-object access control.

Reference

http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-214365.pdf