The password protects the database used in Siemens' Simatic WinCC SCADA system, which runs on Windows operating systems.

Siemens issues patches to SCADA flaws that enable remote attackers to steal files from Siemens SIMATIC WinCC SCADA servers. The flaw may have been exploited ...

Siemens released security updates for several of its SCADA products for industrial environments to fix critical vulnerabilities that may have been exploited in recent attacks.

The vulnerabilities the patches are aimed at correcting include one in which unauthenticated attackers could execute arbitrary code on the SIMATIC WinCC SCADA server via specially crafted packets.

Siemens has advised its customers not to change the default passwords hard-coded into its WinCC Scada product, even though the Stuxnet malware that exploits the critical infrastructure systems ...

The vulnerabilities allow remote attackers to extract files from WinCC SCADA servers and execute arbitrary code on them ...