CVE record · CVE-2017-6865

Siemens AG Primary Setup Tool (PST): A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2…

No CVSS scoreEPSS 0.0047 · 40th percentile

Published by the CVE Program (CNA: siemens) at 11 May 2017, 10:00 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
Siemens AG	Primary Setup Tool (PST)	affected All versions < V4.2 HF1
Siemens AG	SIMATIC Automation Tool	affected All versions < V3.0
Siemens AG	SIMATIC NET PC-Software	affected All versions < V14 SP1
Siemens AG	SIMATIC PCS 7 V8.1	affected All versions
Siemens AG	SIMATIC PCS 7 V8.2	affected All versions < V8.2 SP1
Siemens AG	SIMATIC STEP 7 (TIA Portal) V13	affected All versions < V13 SP2
Siemens AG	SIMATIC STEP 7 (TIA Portal) V14	affected All versions < V14 SP1
Siemens AG	SIMATIC STEP 7 V5.X	affected All versions < V5.6
Siemens AG	SIMATIC WinAC RTX 2010 SP2	affected All versions
Siemens AG	SIMATIC WinAC RTX F 2010 SP2	affected All versions
Siemens AG	SIMATIC WinCC (TIA Portal) V13	affected All versions < V13 SP2
Siemens AG	SIMATIC WinCC (TIA Portal) V14	affected All versions < V14 SP1
Siemens AG	SIMATIC WinCC V7.2 and prior	affected All versions
Siemens AG	SIMATIC WinCC V7.3	affected All versions < V7.3 Update 15
Siemens AG	SIMATIC WinCC V7.4	affected All versions < V7.4 SP1 Upd1
Siemens AG	SIMATIC WinCC flexible 2008	affected All versions < flexible 2008 SP5
Siemens AG	SINAUT ST7CC	affected All versions installed in conjunction with SIMATIC WinCC < V7.3 Update 15
Siemens AG	SINEMA Server	affected All versions < V14
Siemens AG	SINUMERIK 808D Programming Tool	affected All versions < V4.7 SP4 HF2
Siemens AG	SMART PC Access	affected All versions < V2.3
Siemens AG	STEP 7 - Micro/WIN SMART	affected All versions < V2.3
Siemens AG	Security Configuration Tool (SCT)	affected All versions < V5.0
Siemens AG	Security Configuration Tool (SCT)	affected All versions < V5.0

Identifiers: CVE-2017-6865
CNA: siemens
Tags: Siemens AG Primary Setup Tool (PST)
Siemens AG SIMATIC Automation Tool
Siemens AG SIMATIC NET PC-Software
Siemens AG SIMATIC PCS 7 V8.1
Siemens AG SIMATIC PCS 7 V8.2
Siemens AG SIMATIC STEP 7 (TIA Portal) V13
Siemens AG SIMATIC STEP 7 (TIA Portal) V14
Siemens AG SIMATIC STEP 7 V5.X
Published: 11 May 2017
Updated: 5 Aug 2024

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

CISA KEV Not listed.
EPSS 0.0047, the 40th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 11 May 2017. New records show when each source confirmed them.

Sources

References from the CNA

cert-portal.siemens.com/productcert/pdf/ssa-275839.pdf confirm
www.securityfocus.com/bid/98366 vdb-entrybid

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.