CVE-2015-5084 Information

Description

The Siemens SIMATIC WinCC Sm@rtClient and Sm@rtClient Lite applications before 01.00.01.00 for Android do not properly store passwords which allows physically proximate attackers to obtain sensitive information via unspecified vectors.

Reference

http://www.securityfocus.com/bid/75981 http://www.securitytracker.com/id/1033021 http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-267489.pdf https://ics-cert.us-cert.gov/advisories/ICSA-15-202-02