Skip to main content

Spcanywhere CVE-2015-1599

LOW
Permissions, Privileges, and Access Controls (CWE-264)
2015-03-07 cve@mitre.org
Apple Privilege Escalation Siemens Spcanywhere
2.1
CVSS 2.0 · NVD

Severity by source

NVD PRIMARY
2.1 LOW
AV:L/AC:L/Au:N/C:N/I:P/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:L/Au:N/C:N/I:P/A:N
Attack Vector
Local
Attack Complexity
Low
Confidentiality
None
Integrity
P
Availability
None

Lifecycle Timeline

1
CVE Published
Mar 07, 2015 - 02:59 cve.org
LOW 2.1

DescriptionCVE.org

The Siemens SPCanywhere application for iOS allows physically proximate attackers to bypass intended access restrictions by leveraging a filesystem architectural error.

AnalysisAI

The Siemens SPCanywhere application for iOS allows physically proximate attackers to bypass intended access restrictions by leveraging a filesystem architectural error. Rated low severity (CVSS 2.1), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-264. The Siemens SPCanywhere application for iOS allows physically proximate attackers to bypass intended access restrictions by leveraging a filesystem architectural error. Affected products include: Siemens Spcanywhere.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Spcanywhere

View all
CVE-2015-1597 MEDIUM
6.8 Mar 07

The Siemens SPCanywhere application for Android does not use encryption during the loading of code, which allows man-in-
CVE-2015-1596 MEDIUM
5.8 Mar 07

The Siemens SPCanywhere application for Android and iOS does not properly verify X.509 certificates from SSL servers, wh
CVE-2015-1595 MEDIUM
4.3 Mar 07

The Siemens SPCanywhere application for Android and iOS does not use encryption during lookups of system ID to IP addres
CVE-2015-1598 LOW
2.1 Mar 07

The Siemens SPCanywhere application for Android does not properly store application passwords, which allows physically p

Same weakness CWE-264 – Permissions, Privileges, and Access Controls

View all
CVE-2013-0422 CRITICAL POC
9.8
CVE-2016-10372 CRITICAL POC
9.8
CVE-2014-9583 CRITICAL POC
10.0
CVE-2012-0297 CRITICAL POC
10.0
CVE-2015-7709 CRITICAL POC
10.0
CVE-2014-0514 CRITICAL POC
9.3
CVE-2013-6955 CRITICAL POC
10.0
CVE-2012-0299 CRITICAL POC
10.0

Same technique Privilege Escalation

View all
CVE-2025-47812 CRITICAL POC
10.0
CVE-2013-0422 CRITICAL POC
9.8
CVE-2013-0632 CRITICAL POC
9.8
CVE-2017-5689 CRITICAL POC
9.8
CVE-2017-12635 CRITICAL POC
9.8
CVE-2016-10372 CRITICAL POC
9.8
CVE-2014-9583 CRITICAL POC
10.0
CVE-2012-0297 CRITICAL POC
10.0

Share

CVE-2015-1599 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy