Advisories · Technology

Siemens AG SIMATIC WinCC V7.2 and earlier.

Every CVE that names Siemens AG SIMATIC WinCC V7.2 and earlier among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2019-10935 CVE record

Unrestricted file upload in Siemens AG SIMATIC PCS 7 V8.0 and earlier and others
- Siemens AG SIMATIC PCS 7 V8.0 and earlier
- Siemens AG SIMATIC PCS 7 V8.1
- Unrestricted file upload
Not analysed yet 11 Jul 2019
CVE-2019-10922 CVE record

Missing authentication in Siemens AG SIMATIC PCS 7 V8.0 and earlier and others
- Siemens AG SIMATIC PCS 7 V8.0 and earlier
- Siemens AG SIMATIC PCS 7 V8.1 and newer
- Authentication bypass
Not analysed yet 14 May 2019
CVE-2019-10918 CVE record

Siemens AG SIMATIC PCS 7 V8.0 and earlier: A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions)…
- Siemens AG SIMATIC PCS 7 V8.0 and earlier
- Siemens AG SIMATIC PCS 7 V8.1
- CWE-749
Not analysed yet 14 May 2019
CVE-2019-10917 CVE record

Siemens AG SIMATIC PCS 7 V8.0 and earlier: A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions)…
- Siemens AG SIMATIC PCS 7 V8.0 and earlier
- Siemens AG SIMATIC PCS 7 V8.1
- CWE-248
Not analysed yet 14 May 2019
CVE-2019-10916 CVE record

SQL injection in Siemens AG SIMATIC PCS 7 V8.0 and earlier and others
- Siemens AG SIMATIC PCS 7 V8.0 and earlier
- Siemens AG SIMATIC PCS 7 V8.1
- SQL injection
Not analysed yet 14 May 2019