CVE-2017-6871

CVE-2017-6871

Vendor N/A
Product SIMATIC WinCC Sm@rtClient for Android, SIMATIC WinCC Sm@rtClient Lite for Android
Weakness CWE-288
Published August 8, 2017
Last update August 5, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android (All versions before V1.0.2.2) and SIMATIC WinCC Sm@rtClient for Android Lite (All versions before V1.0.2.2). An attacker with physical access to an unlocked mobile device, that has the affected app running, could bypass the app's authentication mechanism under certain conditions.

Key dates

02Disclosure timeline

August 8, 2017 CVE published
August 5, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-0316 WP Directorybox Manager <= 2.5 - Authentication Bypass CVE-2025-11522 Search & Go - Directory WordPress Theme <= 2.7 - Authentication Bypass to Privilege Escalation via Account Takeover CVE-2021-33017 Philips IntelliBridge EC 40 and EC 80 Hub Authentication Bypass Using an Alternate Path or Channel CVE-2025-7692 Orion Login with SMS <= 1.0.5 - Authentication Bypass via Weak OTP CVE-2026-42378 WordPress WP Full Stripe Free plugin <= 8.4.1 - Broken Authentication vulnerability