Simatic Wincc vulnerabilities | LiveThreat CVE Feed

Product

Simatic Wincc

by Siemens · last CVE Sep 10, 2024

CVEs

On KEV

9.9

Max CVSS

New 30D

Vulnerabilities31 In the news0 Timeline

Severity mix

Critical 4High 14Medium 11Low 0

Severity

All severities31 Critical4 High14 Medium11 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Simatic Wincc to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-40358	9.9	1%	Nov 9	A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC04), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC… Affected: 7.4; 7.4; 7.4; 7.4; 7.4; 7.4; +34 more
CVE-2019-10922	9.8	3%	May 14	A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 and newer (All versions), SIMATIC WinCC V7.2 and earlier (All versions),… Affected: through 7.2; 7.3 and later
CVE-2016-5743	9.8	10%	Jul 22	Siemens SIMATIC WinCC before 7.3 Update 10 and 7.4 before Update 1, SIMATIC BATCH before 8.1 SP1 Update 9 as distributed in SIMATIC PCS 7 through 8.1 SP1, SIMATIC OpenPCS 7 before… Affected: through 7.3; through 7.4
CVE-2024-35783	9.1	1%	Sep 10	A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All versions < V2020 SP2 Update 5), SIMATIC Information Server 2022 (All… Affected: 7.4 before 7.5_sp2_update_18; 8.0 before 8.0_update_5
CVE-2023-28829	8.8	0%	Jun 13	A vulnerability has been identified in SIMATIC NET PC Software V14 (All versions), SIMATIC NET PC Software V15 (All versions), SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7… Affected: before 8.0
CVE-2021-40360	8.8	1%	Feb 9	A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC WinCC V15 and… Affected: before 7.4; 7.4; 7.4; 7.4; 7.4; 7.4; +34 more
CVE-2019-10918	8.8	2%	May 14	A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1 with WinCC V7.3 Upd 19), SIMATIC PCS 7 V8.2 (All… Affected: through 7.2; 7.3; 7.4; 7.5
CVE-2019-10916	8.8	2%	May 14	A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1 with WinCC V7.3 Upd 19), SIMATIC PCS 7 V8.2 (All… Affected: through 7.2; 7.3; 7.4; 7.5
CVE-2016-9160	8.1	1%	Dec 17	A vulnerability in SIEMENS SIMATIC WinCC (All versions < SIMATIC WinCC V7.2) and SIEMENS SIMATIC PCS 7 (All versions < SIMATIC PCS 7 V8.0 SP1) could allow a remote attacker to… Affected: through 7.1
CVE-2022-24287	7.8	0%	May 20	A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC06), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1 UC01),… Affected: through 7.4; 7.5; 7.5; 7.5; 7.5; 7.5; +7 more
CVE-2021-40363	7.8	0%	Feb 9	A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC WinCC V15 and… Affected: before 7.4; 7.4; 7.4; 7.4; 7.4; 7.4; +34 more
CVE-2010-2772	7.8	1%	Jul 22	Siemens Simatic WinCC and PCS 7 SCADA system uses a hard-coded password, which allows local users to access a back-end database and gain privileges, as demonstrated in the wild in… Affected: 6.2; 7.0
CVE-2021-40359	7.7	1%	Nov 9	A vulnerability has been identified in OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions < V9.0 Upd4), OpenPCS 7 V9.1 (All versions), SIMATIC BATCH V8.2 (All versions),… Affected: through 7.4; 7.5; 7.5; 7.5; 7.5; 7.5; +13 more
CVE-2021-40142	7.5	3%	Aug 27	In OPC Foundation Local Discovery Server (LDS) before 1.04.402.463, remote attackers can cause a denial of service (DoS) by sending carefully crafted messages that lead to Access… Affected: All versions, or not specified
CVE-2019-19282	7.5	1%	Mar 10	A vulnerability has been identified in OpenPCS 7 V8.1 (All versions), OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions < V9.0 Upd3), SIMATIC BATCH V8.1 (All versions),… Affected: 7.4; 7.4; 7.4; 7.4; 7.4; 7.4; +21 more
CVE-2018-4832	7.5	2%	Apr 24	A vulnerability has been identified in OpenPCS 7 V7.1 and earlier (All versions), OpenPCS 7 V8.0 (All versions), OpenPCS 7 V8.1 (All versions < V8.1 Upd5), OpenPCS 7 V8.2 (All… Affected: before 7.2; 7.2; 7.2; 7.3; 7.3; 7.4; +2 more
CVE-2016-5744	7.5	4%	Jul 22	Siemens SIMATIC WinCC 7.0 through SP3 and 7.2 allows remote attackers to read arbitrary WinCC station files via crafted packets Affected: 7.0; 7.0; 7.0; 7.0; 7.2
CVE-2019-10935	7.2	1%	Jul 11	A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1 with WinCC V7.3 Upd 19), SIMATIC PCS 7 V8.2 (All… Affected: through 7.2; 7.3; 7.3; 7.3; 7.3; 7.3; +11 more
CVE-2020-7580	6.7	0%	Jun 10	A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15… Affected: before 7.4; 7.4; 7.4; 7.4; 7.4; 7.4; +14 more
CVE-2023-48364	6.5	0%	Feb 13	A vulnerability has been identified in OpenPCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC BATCH V9.1 (All versions < V9.1 SP2 UC05), SIMATIC PCS 7 V9.1 (All versions < V9.1… Affected: 7.4; 7.5; 8.0
CVE-2023-48363	6.5	0%	Feb 13	A vulnerability has been identified in OpenPCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC BATCH V9.1 (All versions < V9.1 SP2 UC05), SIMATIC PCS 7 V9.1 (All versions < V9.1… Affected: 7.4; 7.5; 8.0
CVE-2017-6865	6.5	0%	May 11	A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC Automation Tool (All versions < V3.0), SIMATIC NET PC-Software (All versions <… Affected: All versions, or not specified
CVE-2016-7165	6.4	0%	Nov 15	A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC IT Production Suite (All versions < V7.0 SP1 HFX 2), SIMATIC NET PC-Software… Affected: through 7.0; 7.0; 7.2; 7.3; 7.4
CVE-2019-10929	5.9	1%	Aug 13	A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl Affected: before 16
CVE-2021-40364	5.5	0%	Nov 9	A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC04), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC… Affected: through 7.4; 7.5; 7.5; 7.5; 7.5; 7.5; +12 more
CVE-2020-10048	5.5	0%	Feb 9	A vulnerability has been identified in SIMATIC PCS 7 (All versions), SIMATIC WinCC (All versions < V7.5 SP2) Affected: before 7.5; 7.5; 7.5; 7.5
CVE-2019-10917	5.5	0%	May 14	A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1 with WinCC V7.3 Upd 19), SIMATIC PCS 7 V8.2 (All… Affected: through 7.2; 7.3; 7.4; 7.5
CVE-2017-14023	4.9	4%	Nov 6	An Improper Input Validation issue was discovered in Siemens SIMATIC PCS 7 V8.1 prior to V8.1 SP1 with WinCC V7.3 Upd 13, and V8.2 all versions Affected: 7.3
CVE-2017-6867	4.9	2%	May 11	A vulnerability was discovered in Siemens SIMATIC WinCC (V7.3 before Upd 11 and V7.4 before SP1), SIMATIC WinCC Runtime Professional (V13 before SP2 and V14 before SP1), SIMATIC… Affected: 7.3; 7.4
CVE-2014-8552	–	2%	Nov 26	The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before Update 2; SIMATIC PCS 7 7.1 through SP4, 8.0 through SP2, and 8.1; and TIA Portal 13… Affected: 7.0; 7.0; 7.0; 7.0; 7.2; 7.2; +7 more
CVE-2014-8551	–	5%	Nov 26	The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before Update 2; SIMATIC PCS 7 7.1 through SP4, 8.0 through SP2, and 8.1; and TIA Portal 13… Affected: 7.0; 7.0; 7.0; 7.0; 7.2; 7.2; +7 more