Read the docs
TI-2022-08168 Aliases CVE-2022-24287GHSA-8h6x-wrc8-g9xc

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7…

Priority LOW 36CWE-1188Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC06), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1 UC01), SIMATIC WinCC Runtime Professional V16 and earlier (All versions), SIMATIC WinCC Runtime Professional V17 (All versions < V17 Upd4), SIMATIC WinCC V7.3 (All versions), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 21), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 8). A missing printer configuration on the host could allow an authenticated attacker to escape the WinCC Kiosk Mode.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00238 14th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SiemensSIMATIC PCS 7 V8.2All versions—No fix listedCNA
SiemensSIMATIC PCS 7 V9.0All versions < V9.0 SP3 UC06—No fix listedCNA
SiemensSIMATIC PCS 7 V9.1All versions < V9.1 SP1 UC01—No fix listedCNA
SiemensSIMATIC WinCC Runtime Professional V16 and earlierAll versions—No fix listedCNA
SiemensSIMATIC WinCC Runtime Professional V17All versions < V17 Upd4—No fix listedCNA
SiemensSIMATIC WinCC V7.3All versions—No fix listedCNA
SiemensSIMATIC WinCC V7.4All versions < V7.4 SP1 Update 21—No fix listedCNA
SiemensSIMATIC WinCC V7.5All versions < V7.5 SP2 Update 8—No fix listedCNA
  • SIMATIC PCS 7 V8.2 VendorSiemens Affected All versions Fixed in — No fix listed CNA
  • SIMATIC PCS 7 V9.0 VendorSiemens Affected All versions < V9.0 SP3 UC06 Fixed in — No fix listed CNA
  • SIMATIC PCS 7 V9.1 VendorSiemens Affected All versions < V9.1 SP1 UC01 Fixed in — No fix listed CNA
  • SIMATIC WinCC Runtime Professional V16 and earlier VendorSiemens Affected All versions Fixed in — No fix listed CNA
  • SIMATIC WinCC Runtime Professional V17 VendorSiemens Affected All versions < V17 Upd4 Fixed in — No fix listed CNA
  • SIMATIC WinCC V7.3 VendorSiemens Affected All versions Fixed in — No fix listed CNA
  • SIMATIC WinCC V7.4 VendorSiemens Affected All versions < V7.4 SP1 Update 21 Fixed in — No fix listed CNA
  • SIMATIC WinCC V7.5 VendorSiemens Affected All versions < V7.5 SP2 Update 8 Fixed in — No fix listed CNA

CPE configurations NVD · 17

CPEVersionsRoleVendor
cpe:2.3:a:siemens:simatic_pcs_7:*:*:*:*:*:*:*:*up to 9.0VulnerableSiemens
cpe:2.3:a:siemens:simatic_pcs_7:9.1:*:*:*:*:*:*:*9.1VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:*:*:*:*:*:*:*:*up to 7.4VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:-:*:*:*:*:*:*7.5VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:sp1:*:*:*:*:*:*7.5 sp1VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:sp1_update1:*:*:*:*:*:*7.5 sp1_update1VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:sp1_update2:*:*:*:*:*:*7.5 sp1_update2VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:sp2:*:*:*:*:*:*7.5 sp2VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update1:*:*:*:*:*:*7.5 sp2_update1VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update2:*:*:*:*:*:*7.5 sp2_update2VulnerableSiemens
  • cpe:2.3:a:siemens:simatic_pcs_7:*:*:*:*:*:*:*:* Versions up to 9.0 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_pcs_7:9.1:*:*:*:*:*:*:* Versions 9.1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:*:*:*:*:*:*:*:* Versions up to 7.4 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:-:*:*:*:*:*:* Versions 7.5 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp1:*:*:*:*:*:* Versions 7.5 sp1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp1_update1:*:*:*:*:*:* Versions 7.5 sp1_update1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp1_update2:*:*:*:*:*:* Versions 7.5 sp1_update2 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp2:*:*:*:*:*:* Versions 7.5 sp2 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update1:*:*:*:*:*:* Versions 7.5 sp2_update1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update2:*:*:*:*:*:* Versions 7.5 sp2_update2 Vulnerable ·Siemens
Show 7 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update3:*:*:*:*:*:*7.5 sp2_update3VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update4:*:*:*:*:*:*7.5 sp2_update4VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update5:*:*:*:*:*:*7.5 sp2_update5VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update6:*:*:*:*:*:*7.5 sp2_update6VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update7:*:*:*:*:*:*7.5 sp2_update7VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc_runtime_professional:*:*:*:*:*:*:*:*up to 16VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc_runtime_professional:17:*:*:*:*:*:*:*17VulnerableSiemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update3:*:*:*:*:*:* Versions 7.5 sp2_update3 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update4:*:*:*:*:*:* Versions 7.5 sp2_update4 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update5:*:*:*:*:*:* Versions 7.5 sp2_update5 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update6:*:*:*:*:*:* Versions 7.5 sp2_update6 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update7:*:*:*:*:*:* Versions 7.5 sp2_update7 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc_runtime_professional:*:*:*:*:*:*:*:* Versions up to 16 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc_runtime_professional:17:*:*:*:*:*:*:* Versions 17 Vulnerable ·Siemens

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-24287
  2. 2026-10-03 Alias added: GHSA-8h6x-wrc8-g9xc

References

Patch 1

  • TI-2014-07026 The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3… CVSS 2.0HIGH 10.0
  • TI-2019-08143 Missing authentication in Siemens SIMATIC PCS 7 V8.0 and earlier CVSS 3.1CRITICAL 9.8
  • TI-2023-11164 Code injection in Siemens SIMATIC PCS 7 CVSS 3.1CRITICAL 10.0
  • TI-2021-17429 Path traversal in Siemens SIMATIC PCS 7 V8.2 CVSS 3.1CRITICAL 9.9
  • TI-2019-08139 A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions)… CVSS 3.1HIGH 8.8
  • TI-2019-08137 SQL injection in Siemens SIMATIC PCS 7 V8.0 and earlier CVSS 3.1HIGH 8.8
See all 24 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences