CVE-2015-5084 - Tiniest Outfits

Description

The Siemens SIMATIC WinCC Sm@rtClient and Sm@rtClient Lite applications before 01.00.01.00 for Android do not properly store passwords which allows physically proximate attackers to obtain sensitive information via unspecified vectors.

Reference

https://ics-cert.us-cert.gov/advisories/ICSA-15-202-02 http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-267489.pdf http://www.securityfocus.com/bid/75981 http://www.securitytracker.com/id/1033021