Read the docs

Siemens

Records2488All Threatist records
Exploited (KEV)37In CISA KEV
CVSS critical333CVSS 9.0–10.0
CVSS high1406CVSS 7.0–8.9

Exploited now

Siemens records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

19 records in Simatic Step 7 · all components

TI-2023-11164 CVE-2023-25910 · GHSA-5wm3-c83x-cqpq

Code injection in Siemens SIMATIC PCS 7

Priority MEDIUM 45

A vulnerability has been identified in SIMATIC PCS 7 (All versions < V9.1 SP2 UC04), SIMATIC S7-PM (All versions < V5.7 SP1 HF1), SIMATIC S7-PM (All versions < V5.7 SP2 HF1), SIMATIC STEP 7 V5 (All versions < V5.7).

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01 Published 2023-06-13 Fixed in V9.1 SP2 UC04, V5.7 SP1 HF1 +2 CWE-94
Priority MEDIUM 40

A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.02484 Published 2020-07-14 Fixed in V3.2, V3.3 +3 CWE-400
Priority LOW 34

A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) V15 (All versions), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 5), SIMATIC STEP 7 (TIA Portal) V17 (All versions < V17 Update 2).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0024 Published 2022-04-12 No fix listed CWE-284
Priority LOW 34

A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions < V9.2), SIMATIC STEP 7 V5.X (All versions < V5.6 SP2 HF3), SI…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00423 Published 2020-06-10 Fixed in V9.2 CWE-122
Priority LOW 34

A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions < V9.2), SIMATIC STEP 7 V5.X (All versions < V5.6 SP2 HF3), SI…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00452 Published 2020-06-10 Fixed in V9.2 CWE-427
Priority LOW 30

A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00379 Published 2020-07-14 Fixed in V3.2, V3.3 +1 CWE-428
Priority LOW 30

A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions), SIMATIC NET PC Software…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.0046 Published 2020-06-10 Fixed in V17, V21.8 +1 CWE-428
Priority LOW 29

A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC IT Production Suite (All versions < V7.0 SP1 HFX 2), SIMATIC NET PC-Software (All versions < V14), SIMATIC PCS 7 V7.1 (Al…

CVSS 3.0MEDIUM 6.4 Local High privileges No interaction EPSS 0.00378 Published 2016-11-15 No fix listed CWE-254
Priority LOW 28

A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02151 Published 2020-07-14 Fixed in V3.2, V3.3 +3 CWE-20
Priority LOW 21

Siemens SIMATIC STEP 7 (TIA Portal) before 14 improperly stores pre-shared key data in TIA project files, which makes it easier for local users to obtain sensitive information by leveraging access to a file and conductin…

CVSS 3.0MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00297 Published 2016-10-13 No fix listed CWE-254
Priority LOW 13

Siemens SIMATIC STEP 7 (TIA Portal) before 14 uses an improper format for managing TIA project files during version updates, which makes it easier for local users to obtain sensitive configuration information via unspeci…

CVSS 3.0LOW 2.5 Local Low privileges No interaction EPSS 0.00332 Published 2016-10-13 No fix listed CWE-200
Priority LOW 11

Siemens SIMATIC STEP 7 (TIA Portal) 12 and 13 before 13 SP1 Upd1 improperly stores password data within project files, which makes it easier for local users to determine cleartext (1) protection-level passwords or (2) we…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00366 Published 2015-04-06 No fix listed CWE-200
Open these records in search →