SS
Product
Simatic Step 7
19
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 7Low 1
Watch
Add Simatic Step 7 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-25910 | 8.8 | Jun 13 | A vulnerability has been identified in SIMATIC PCS 7 (All versions < V9.1 SP2 UC04), SIMATIC S7-PM (All versions < V5.7 SP1 HF1), SIMATIC S7-PM (All versions < V5.7 SP2 HF1),… Affected: before 5.7 |
| CVE-2020-7587 | 8.2 | Jul 14 | A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All… Affected: 15 before 15.1; 15.1; 16; 16 |
| CVE-2021-42029 | 7.8 | Apr 12 | A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) V15 (All versions), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 5), SIMATIC STEP 7 (TIA Portal)… Affected: 15 before 16; 16; 16; 16; 16; 16; +2 more |
| CVE-2020-7586 | 7.8 | Jun 10 | A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions < V9.2), SIMATIC STEP… Affected: before 5.6; 5.6; 5.6; 5.6; 5.6 |
| CVE-2020-7585 | 7.8 | Jun 10 | A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions < V9.2), SIMATIC STEP… Affected: before 5.6; 5.6; 5.6; 5.6; 5.6 |
| CVE-2020-7581 | 6.7 | Jul 14 | A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All… Affected: before 16; 16; 16 |
| CVE-2020-7580 | 6.7 | Jun 10 | A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15… Affected: before 5.6; 13 through 16; 5.6; 5.6; 5.6; 5.6 |
| CVE-2016-7165 | 6.4 | Nov 15 | A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC IT Production Suite (All versions < V7.0 SP1 HFX 2), SIMATIC NET PC-Software… Affected: through 5.5 |
| CVE-2019-10929 | 5.9 | Aug 13 | A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl Affected: before 16 |
| CVE-2022-46141 | 5.5 | Dec 12 | A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All versions < V19) Affected: before 19 |
| CVE-2020-7588 | 5.3 | Jul 14 | A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All… Affected: 15 through 15.1; 16; 16 |
| CVE-2016-7959 | 4.7 | Oct 13 | Siemens SIMATIC STEP 7 (TIA Portal) before 14 improperly stores pre-shared key data in TIA project files, which makes it easier for local users to obtain sensitive information by… Affected: through 13.010 |
| CVE-2016-7960 | 2.5 | Oct 13 | Siemens SIMATIC STEP 7 (TIA Portal) before 14 uses an improper format for managing TIA project files during version updates, which makes it easier for local users to obtain… Affected: through 13.010 |
| CVE-2015-1602 | – | Apr 6 | Siemens SIMATIC STEP 7 (TIA Portal) 12 and 13 before 13 SP1 Upd1 improperly stores password data within project files, which makes it easier for local users to determine cleartext… Affected: through 13.0; 12.0; 13.0 |
| CVE-2015-1601 | – | Apr 6 | Siemens SIMATIC STEP 7 (TIA Portal) 12 and 13 before 13 SP1 Upd1 allows man-in-the-middle attackers to obtain sensitive information or modify transmitted data via unspecified… Affected: through 13; 12; 13 |
| CVE-2015-1594 | – | Mar 7 | Untrusted search path vulnerability in Siemens SIMATIC ProSave before 13 SP1; SIMATIC CFC before 8.0 SP4 Upd9 and 8.1 before Upd1; SIMATIC STEP 7 before 5.5 SP1 HF2, 5.5 SP2… Affected: through 5.5; 5.5; 5.5; 5.5 |
| CVE-2015-1356 | – | Feb 18 | Siemens SIMATIC STEP 7 (TIA Portal) before 13 SP1 determines a user's privileges on the basis of project-file fields that lack integrity protection, which allows remote attackers… Affected: through 13.0 |
| CVE-2015-1355 | – | Feb 18 | Siemens SIMATIC STEP 7 (TIA Portal) before 13 SP1 uses a weak password-hash algorithm, which makes it easier for local users to determine cleartext passwords by reading a project… Affected: through 13.0 |
| CVE-2012-3015 | – | Jul 26 | Untrusted search path vulnerability in Siemens SIMATIC STEP7 before 5.5 SP1, as used in SIMATIC PCS7 7.1 SP3 and earlier and other products, allows local users to gain privileges… Affected: through 5.5 |
Showing 19