Advisories · Technology

Siemens SIMATIC STEP 7 V5.

Every CVE that names Siemens SIMATIC STEP 7 V5 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-46280 CVE record

CVSS 8.2 High

Out-of-bounds read in Siemens Security Configuration Tool (SCT) and others
- Siemens Security Configuration Tool (SCT)
- Siemens SIMATIC Automation Tool
- Memory corruption
Not analysed yet 14 May 2024
CVE-2023-25910 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Code injection in Siemens SIMATIC PCS 7 and others
- Siemens SIMATIC PCS 7
- Siemens SIMATIC S7-PM
- Code injection
Not analysed yet 13 Jun 2023
CVE-2020-7580 CVE record

Unquoted search path in Siemens SIMATIC Automation Tool and others
- Siemens SIMATIC Automation Tool
- Siemens SIMATIC NET PC Software V14
- CWE-428
Not analysed yet 10 Jun 2020