Skip to content
Fencer Intel
medium 6.9

CVE-2015-1594 json

Untrusted search path vulnerability in Siemens SIMATIC ProSave before 13 SP1; SIMATIC CFC before 8.0 SP4 Upd9 and 8.1 before Upd1; SIMATIC…

published 11y ago modified 4mo ago also EUVD-2015-1725

cvss
6.9
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
0.4%
EPSS 0.4% chance of exploitation in 30 days, percentile 35%
public exploits
0
none known

Summary

Untrusted search path vulnerability in Siemens SIMATIC ProSave before 13 SP1; SIMATIC CFC before 8.0 SP4 Upd9 and 8.1 before Upd1; SIMATIC STEP 7 before 5.5 SP1 HF2, 5.5 SP2 before HF7, 5.5 SP3, and 5.5 SP4 before HF4; SIMOTION Scout before 4.4; and STARTER before 4.4 HF3 allows local users to gain privileges via a Trojan horse application file.

Is CVE-2015-1594 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-15-064-02A updated cvss 6.9

Siemens SIMATIC ProSave, SIMATIC CFC, SIMATIC STEP 7, SIMOTION Scout, and STARTER Insufficiently Qualified Paths (Update A)

  • Siemens CFC V8.0 SP4 <V8.0_SP4_Upd_9 Siemens CFC V8.1 <V8.1_Upd1 Siemens PCS 7 V8.0 SP2 Siemens PCS 7 with STEP 7 CFC V8.1 Upd1 <V8.1 Siemens PCS 7 with STEP 7 SP4 HF4 <V8.1 Siemens SIMATIC CFC <V8.0_SP4
    +9 more products
    Siemens SIMATIC PCS 7 (as STEP 7 and CFC are incorporated) <V8.0_SP2 Siemens SIMATIC ProSave <V13_SP1 Siemens SIMATIC STEP 7 V5.5 <V5.5_SP1 Siemens SIMOTION Scout <V4.4 Siemens STARTER <V4.4_HF3 Siemens STEP 7 V5.5 SP1 <V5.5_SP1_HF2 Siemens STEP 7 V5.5 SP2 <V5.5_SP2_HF7 Siemens STEP 7 V5.5 SP3 Siemens STEP 7 V5.5 SP4 <V5.5_SP4_HF4
    affected: mitigation “The update for SIMOTION SCOUT can be obtained here: https://support.industry.siemens.com/cs/de/en/view/107586911”

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

cisa ICSA-15-064-02 updated cvss 6.9

Siemens SIMATIC ProSave, SIMATIC CFC, SIMATIC STEP 7, SIMOTION Scout, and STARTER Insufficiently Qualified Paths

  • Siemens CFC V8.0 SP4 <V8.0_SP4_Upd_9 Siemens CFC V8.1 <V8.1_Upd1 Siemens PCS 7 V8.0 SP2 Siemens PCS 7 with STEP 7 CFC V8.1 Upd1 <V8.1 Siemens PCS 7 with STEP 7 SP4 HF4 <V8.1 Siemens SIMATIC CFC <V8.0_SP4
    +9 more products
    Siemens SIMATIC PCS 7 (as STEP 7 and CFC are incorporated) <V8.0_SP2 Siemens SIMATIC ProSave <V13_SP1 Siemens SIMATIC STEP 7 V5.5 <V5.5_SP1 Siemens SIMOTION Scout <V4.4 Siemens STARTER <V4.4_HF3 Siemens STEP 7 V5.5 SP1 <V5.5_SP1_HF2 Siemens STEP 7 V5.5 SP2 <V5.5_SP2_HF7 Siemens STEP 7 V5.5 SP3 Siemens STEP 7 V5.5 SP4 <V5.5_SP4_HF4
    affected: mitigation “The update for SIMOTION SCOUT can be obtained here: https://support.industry.siemens.com/cs/de/en/view/107586911”

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

Exploit prediction

0.41% chance of exploitation in the next 30 days, higher than 35% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 2.0 6.9 AV:L/AC:M/Au:N/C:C/I:C/A:C

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.