What’s Vulnerable › Vulnerabilities

CVE-2012-3020

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-08-06 · updated 2026-06-16
• Weakness: CWE-255

Description

The Siemens Synco OZW Web Server devices OZW672.*, OZW772.*, and OZW775 with firmware before 4 have an unspecified default password, which makes it easier for remote attackers to obtain administrative access via a network session.

Affected products

• Siemens Synco Ozw Web Server: ozw672.01, ozw672.04, ozw672.16, ozw772.01, ozw772.04, ozw772.16 (+2)
• Siemens Synco Ozw Web Server Firmware: through 3.0

References

• http://support.automation.siemens.com/WW/view/en/41929231/130000
• http://www.us-cert.gov/control_systems/pdf/ICSA-12-214-01.pdf
• http://support.automation.siemens.com/WW/view/en/41929231/130000
• http://www.us-cert.gov/control_systems/pdf/ICSA-12-214-01.pdf

Get alerted when CVE-2012-3020 or the next vulnerability affects your stack