Advisories · Technology

Siemens SIMATIC PCS 7 V9.1.

Every CVE that names Siemens SIMATIC PCS 7 V9.1 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-35783 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Execution with unnecessary privileges in Siemens SIMATIC BATCH V9.1 and others
- Siemens SIMATIC BATCH V9.1
- Siemens SIMATIC Information Server 2020
- Privilege escalation
Not analysed yet 10 Sept 2024
CVE-2024-30321 CVE record

CVSS 8.2 High

Exposure of personal information in Siemens SIMATIC PCS 7 V9.1 and others
- Siemens SIMATIC PCS 7 V9.1
- Siemens SIMATIC WinCC Runtime Professional V18
- Information disclosure
Not analysed yet 9 Jul 2024
CVE-2023-46280 CVE record

CVSS 8.2 High

Out-of-bounds read in Siemens Security Configuration Tool (SCT) and others
- Siemens Security Configuration Tool (SCT)
- Siemens SIMATIC Automation Tool
- Memory corruption
Not analysed yet 14 May 2024
CVE-2023-50821 CVE record

CVSS 6.9 Medium

Buffer overflow in Siemens SIMATIC PCS 7 V9.1 and others
- Siemens SIMATIC PCS 7 V9.1
- Siemens SIMATIC WinCC Runtime Professional V17
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2023-48364 CVE record

CVSS 7.1 High

NULL pointer dereference in Siemens OpenPCS 7 V9.1 and others
- Siemens OpenPCS 7 V9.1
- Siemens SIMATIC BATCH V9.1
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2023-48363 CVE record

CVSS 7.1 High

NULL pointer dereference in Siemens OpenPCS 7 V9.1 and others
- Siemens OpenPCS 7 V9.1
- Siemens SIMATIC BATCH V9.1
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2023-28829 CVE record

CVSS 3.9 Low

Siemens SIMATIC NET PC Software V14: A vulnerability has been identified in SIMATIC NET PC Software V14 (All versions)…
- Siemens SIMATIC NET PC Software V14
- Siemens SIMATIC NET PC Software V15
- CWE-477
Not analysed yet 13 Jun 2023
CVE-2022-24287 CVE record

CVSS 7.8 High

Siemens SIMATIC PCS 7 V8.2: A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions)…
- Siemens SIMATIC PCS 7 V8.2
- Siemens SIMATIC PCS 7 V9.0
- CWE-1188
Not analysed yet 10 May 2022
CVE-2021-40363 CVE record

Siemens SIMATIC PCS 7 V8.2: A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions)…
- Siemens SIMATIC PCS 7 V8.2
- Siemens SIMATIC PCS 7 V9.0
- Information disclosure
Not analysed yet 9 Feb 2022
CVE-2021-40360 CVE record

Information disclosure in Siemens SIMATIC PCS 7 V8.2 and others
- Siemens SIMATIC PCS 7 V8.2
- Siemens SIMATIC PCS 7 V9.0
- Information disclosure
Not analysed yet 9 Feb 2022
CVE-2021-40364 CVE record

CVSS 5.5 Medium

Sensitive information in log files in Siemens SIMATIC PCS 7 V8.2 and others
- Siemens SIMATIC PCS 7 V8.2
- Siemens SIMATIC PCS 7 V9.0
- Information disclosure
Not analysed yet 9 Nov 2021
CVE-2021-40359 CVE record

CVSS 7.7 High

Path traversal in Siemens OpenPCS 7 V8.2 and others
- Siemens OpenPCS 7 V8.2
- Siemens OpenPCS 7 V9.0
- Path traversal
Not analysed yet 9 Nov 2021
CVE-2021-40358 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Path traversal in Siemens SIMATIC PCS 7 V8.2 and others
- Siemens SIMATIC PCS 7 V8.2
- Siemens SIMATIC PCS 7 V9.0
- Path traversal
Not analysed yet 9 Nov 2021