SW
Product
Simatic Wincc Open Architecture
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 0Medium 2Low 0
Watch
Add Simatic Wincc Open Architecture to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-3991 | 9.8 | Feb 5 | An exploitable heap overflow vulnerability exists in the WkbProgramLow function of WibuKey Network server management, version 6.40.2402.500 Affected: 3.14; 3.15; 3.16 |
| CVE-2018-13799 | 9.1 | Sep 12 | A vulnerability has been identified in SIMATIC WinCC OA V3.14 and prior (All versions < V3.14-P021) Affected: through 3.14 |
| CVE-2020-7580 | 6.7 | Jun 10 | A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15… Affected: 3.16; 3.17 |
| CVE-2019-10929 | 5.9 | Aug 13 | A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl Affected: through 3.15; 3.16; 3.16 |
| CVE-2014-1699 | – | Feb 7 | Siemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to cause a denial of service (monitoring-service outage) via malformed HTTP requests to port 4999 Affected: through 3.12 |
| CVE-2014-1698 | – | Feb 7 | Directory traversal vulnerability in Siemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to read arbitrary files via crafted packets to TCP port 4999 Affected: through 3.12 |
| CVE-2014-1697 | – | Feb 7 | The integrated web server in Siemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to execute arbitrary code via crafted packets to TCP port 4999 Affected: through 3.12 |
| CVE-2014-1696 | – | Feb 7 | Siemens SIMATIC WinCC OA before 3.12 P002 January uses a weak hash algorithm for passwords, which makes it easier for remote attackers to obtain access via a brute-force attack Affected: through 3.12 |
Showing 8