Read the docs

Siemens

Records2488All Threatist records
Exploited (KEV)37In CISA KEV
CVSS critical333CVSS 9.0–10.0
CVSS high1406CVSS 7.0–8.9

Exploited now

Siemens records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

30 records in Simatic Wincc · all components

Priority MEDIUM 55

Siemens SIMATIC WinCC before 7.3 Update 10 and 7.4 before Update 1, SIMATIC BATCH before 8.1 SP1 Update 9 as distributed in SIMATIC PCS 7 through 8.1 SP1, SIMATIC OpenPCS 7 before 8.1 Update 3 as distributed in SIMATIC P…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.10491 Published 2016-07-22 No fix listed CWE-20
Priority MEDIUM 51

The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before Update 2; SIMATIC PCS 7 7.1 through SP4, 8.0 through SP2, and 8.1; and TIA Portal 13 before Update 6 allows remote attackers…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05271 Published 2014-11-26 No fix listed CWE-94
Priority MEDIUM 47

A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 and newer (All versions), SIMATIC WinCC V7.2 and earlier (All versions), SIMATIC WinCC V7.3 and newer (All versions…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0264 Published 2019-05-14 No fix listed CWE-306
TI-2021-17429 CVE-2021-40358 · GHSA-rcjv-2hj5-3cmq

Path traversal in Siemens SIMATIC PCS 7 V8.2

Priority MEDIUM 45

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC04), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC WinCC V15 and earlier (All versions < V15…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01274 Published 2021-11-09 No fix listed CWE-22
Priority MEDIUM 42

A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1 with WinCC V7.3 Upd 19), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1 with WinCC V7.4 SP1 Upd11…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01926 Published 2019-05-14 No fix listed CWE-749
Priority MEDIUM 41

A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1 with WinCC V7.3 Upd 19), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1 with WinCC V7.4 SP1 Upd11…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01541 Published 2019-05-14 No fix listed CWE-89
Priority LOW 39

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC WinCC V15 and earlier (All versions < V15 SP1 Update 7),…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00682 Published 2022-02-09 No fix listed CWE-200
Priority LOW 38

A vulnerability has been identified in SIMATIC NET PC Software V14 (All versions), SIMATIC NET PC Software V15 (All versions), SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00291 Published 2023-06-13 Fixed in V8.0 CWE-477
Priority LOW 37

A vulnerability has been identified in OpenPCS 7 V7.1 and earlier (All versions), OpenPCS 7 V8.0 (All versions), OpenPCS 7 V8.1 (All versions < V8.1 Upd5), OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions < V9…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0242 Published 2018-04-24 No fix listed CWE-20
Priority LOW 36

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC06), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1 UC01), SIMATIC WinCC Runtime Professional V16 and e…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00238 Published 2022-05-10 No fix listed CWE-1188
TI-2021-17430 CVE-2021-40359 · GHSA-6gc3-vp66-4fcm

Path traversal in Siemens OpenPCS 7 V8.2

Priority LOW 36

A vulnerability has been identified in OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions < V9.0 Upd4), OpenPCS 7 V9.1 (All versions), SIMATIC BATCH V8.2 (All versions), SIMATIC BATCH V9.0 (All versions), SIMATI…

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.01174 Published 2021-11-09 No fix listed CWE-22
Priority LOW 36

A vulnerability has been identified in OpenPCS 7 V8.1 (All versions), OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions < V9.0 Upd3), SIMATIC BATCH V8.1 (All versions), SIMATIC BATCH V8.2 (All versions < V8.2 U…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01344 Published 2020-03-10 No fix listed CWE-131
Priority LOW 34

A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1 with WinCC V7.3 Upd 19), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1 with WinCC V7.4 SP1 Upd 1…

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01274 Published 2019-07-11 No fix listed CWE-434
Priority LOW 33

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC WinCC V15 and earlier (All versions < V15 SP1 Update 7),…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0016 Published 2022-02-09 No fix listed CWE-538
Priority LOW 31

A vulnerability has been identified in OpenPCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC BATCH V9.1 (All versions < V9.1 SP2 UC05), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC Route Control V9.1 (All…

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.0027 Published 2024-02-13 Fixed in V9.1 SP2 UC05, V18 Update 4 +3 CWE-476
Priority LOW 31

A vulnerability has been identified in OpenPCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC BATCH V9.1 (All versions < V9.1 SP2 UC05), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC Route Control V9.1 (All…

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.0027 Published 2024-02-13 Fixed in V9.1 SP2 UC05, V18 Update 4 +3 CWE-476
Priority LOW 30

A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions), SIMATIC NET PC Software…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.0046 Published 2020-06-10 Fixed in V17, V21.8 +1 CWE-428
Priority LOW 29

An Improper Input Validation issue was discovered in Siemens SIMATIC PCS 7 V8.1 prior to V8.1 SP1 with WinCC V7.3 Upd 13, and V8.2 all versions.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.03675 Published 2017-11-06 No fix listed CWE-20
Priority LOW 29

A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC Automation Tool (All versions < V3.0), SIMATIC NET PC-Software (All versions < V14 SP1), SIMATIC PCS 7 V8.1 (All versions…

CVSS 3.0MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00469 Published 2017-05-11 Fixed in V3.0, V5.6 +3 CWE-20
Priority LOW 29

A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC IT Production Suite (All versions < V7.0 SP1 HFX 2), SIMATIC NET PC-Software (All versions < V14), SIMATIC PCS 7 V7.1 (Al…

CVSS 3.0MEDIUM 6.4 Local High privileges No interaction EPSS 0.00378 Published 2016-11-15 No fix listed CWE-254
Load more
Open these records in search →