Priority MEDIUM 45
A vulnerability has been identified in SIMATIC PCS 7 (All versions < V9.1 SP2 UC04), SIMATIC S7-PM (All versions < V5.7 SP1 HF1), SIMATIC S7-PM (All versions < V5.7 SP2 HF1), SIMATIC STEP 7 V5 (All versions < V5.7).
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.01 · Published 2023-06-13 · Fixed in V9.1 SP2 UC04, V5.7 SP1 HF1 +2 CWE-94
Priority MEDIUM 40
A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All…
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.02484 · Published 2020-07-14 · Fixed in V3.2, V3.3 +3 CWE-400
Priority LOW 34
A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) V15 (All versions), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 5), SIMATIC STEP 7 (TIA Portal) V17 (All versions < V17 Update 2).
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0024 · Published 2022-04-12 · No fix listed CWE-284
Priority LOW 34
A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions < V9.2), SIMATIC STEP 7 V5.X (All versions < V5.6 SP2 HF3), SI…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00423 · Published 2020-06-10 · Fixed in V9.2 CWE-122
Priority LOW 34
A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions < V9.2), SIMATIC STEP 7 V5.X (All versions < V5.6 SP2 HF3), SI…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00452 · Published 2020-06-10 · Fixed in V9.2 CWE-427
Priority LOW 33
Siemens SIMATIC STEP 7 (TIA Portal) 12 and 13 before 13 SP1 Upd1 allows man-in-the-middle attackers to obtain sensitive information or modify transmitted data via unspecified vectors.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.01429 · Published 2015-04-06 · No fix listed CWE-254
Priority LOW 31
Untrusted search path vulnerability in Siemens SIMATIC ProSave before 13 SP1; SIMATIC CFC before 8.0 SP4 Upd9 and 8.1 before Upd1; SIMATIC STEP 7 before 5.5 SP1 HF2, 5.5 SP2 before HF7, 5.5 SP3, and 5.5 SP4 before HF4; S…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00405 · Published 2015-03-07 · No fix listed
Priority LOW 31
Untrusted search path vulnerability in Siemens SIMATIC STEP7 before 5.5 SP1, as used in SIMATIC PCS7 7.1 SP3 and earlier and other products, allows local users to gain privileges via a Trojan horse DLL in a STEP7 project…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00451 · Published 2012-07-26 · No fix listed
Priority LOW 30
A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All…
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00379 · Published 2020-07-14 · Fixed in V3.2, V3.3 +1 CWE-428
Priority LOW 30
A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions), SIMATIC NET PC Software…
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.0046 · Published 2020-06-10 · Fixed in V17, V21.8 +1 CWE-428
Priority LOW 29
A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC IT Production Suite (All versions < V7.0 SP1 HFX 2), SIMATIC NET PC-Software (All versions < V14), SIMATIC PCS 7 V7.1 (Al…
CVSS 3.0MEDIUM 6.4· Local · High privileges · No interaction · EPSS 0.00378 · Published 2016-11-15 · No fix listed CWE-254
Priority LOW 28
A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02151 · Published 2020-07-14 · Fixed in V3.2, V3.3 +3 CWE-20
Priority LOW 28
A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00978 · Published 2019-08-13 · Fixed in V20.8, V4.4.0 +4 CWE-327
Priority LOW 24
A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All versions < V19).
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00142 · Published 2023-12-12 · Fixed in V19 CWE-316
Priority LOW 21
Siemens SIMATIC STEP 7 (TIA Portal) before 14 improperly stores pre-shared key data in TIA project files, which makes it easier for local users to obtain sensitive information by leveraging access to a file and conductin…
CVSS 3.0MEDIUM 4.7· Local · Low privileges · No interaction · EPSS 0.00297 · Published 2016-10-13 · No fix listed CWE-254
Priority LOW 21
Siemens SIMATIC STEP 7 (TIA Portal) before 13 SP1 determines a user's privileges on the basis of project-file fields that lack integrity protection, which allows remote attackers to establish arbitrary authorization data…
CVSS 2.0MEDIUM 4.4· Local · No auth · Interaction — · EPSS 0.00512 · Published 2015-02-18 · No fix listed CWE-264
Priority LOW 13
Siemens SIMATIC STEP 7 (TIA Portal) before 14 uses an improper format for managing TIA project files during version updates, which makes it easier for local users to obtain sensitive configuration information via unspeci…
CVSS 3.0LOW 2.5· Local · Low privileges · No interaction · EPSS 0.00332 · Published 2016-10-13 · No fix listed CWE-200
Priority LOW 11
Siemens SIMATIC STEP 7 (TIA Portal) 12 and 13 before 13 SP1 Upd1 improperly stores password data within project files, which makes it easier for local users to determine cleartext (1) protection-level passwords or (2) we…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00366 · Published 2015-04-06 · No fix listed CWE-200
Priority LOW 11
Siemens SIMATIC STEP 7 (TIA Portal) before 13 SP1 uses a weak password-hash algorithm, which makes it easier for local users to determine cleartext passwords by reading a project file and conducting a brute-force attack.
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.0037 · Published 2015-02-18 · No fix listed CWE-310