Advisories · Technology

Siemens SIMATIC WinCC OA V3.18.

Every CVE that names Siemens SIMATIC WinCC OA V3.18 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-46280 CVE record

CVSS 8.2 High

Out-of-bounds read in Siemens Security Configuration Tool (SCT) and others
- Siemens Security Configuration Tool (SCT)
- Siemens SIMATIC Automation Tool
- Memory corruption
Not analysed yet 14 May 2024
CVE-2022-44731 CVE record

CVSS 5.4 Medium

Argument injection in Siemens SIMATIC WinCC OA V3.15 and others
- Siemens SIMATIC WinCC OA V3.15
- Siemens SIMATIC WinCC OA V3.16
- Command injection
Not analysed yet 13 Dec 2022
CVE-2022-33139 CVE record

Siemens Cerberus DMS: A vulnerability has been identified in Cerberus DMS (All versions)…
- Siemens Cerberus DMS
- Siemens Desigo CC
- CWE-603
Not analysed yet 21 Jun 2022