Advisories · Technology
Siemens SIMATIC WinCC Runtime Professional V18.
Every CVE that names Siemens SIMATIC WinCC Runtime Professional V18 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.4 CriticalCritical · CVSS 9+
Execution with unnecessary privileges in Siemens SIMATIC BATCH V9.1 and others
- Siemens SIMATIC BATCH V9.1
- Siemens SIMATIC Information Server 2020
- Privilege escalation
- CVSS 8.2 High
Exposure of personal information in Siemens SIMATIC PCS 7 V9.1 and others
- Siemens SIMATIC PCS 7 V9.1
- Siemens SIMATIC WinCC Runtime Professional V18
- Information disclosure
- CVSS 8.2 High
Out-of-bounds read in Siemens Security Configuration Tool (SCT) and others
- Siemens Security Configuration Tool (SCT)
- Siemens SIMATIC Automation Tool
- Memory corruption
- CVSS 6.9 Medium
Buffer overflow in Siemens SIMATIC PCS 7 V9.1 and others
- Siemens SIMATIC PCS 7 V9.1
- Siemens SIMATIC WinCC Runtime Professional V17
- Memory corruption
- CVSS 7.1 High
NULL pointer dereference in Siemens OpenPCS 7 V9.1 and others
- Siemens OpenPCS 7 V9.1
- Siemens SIMATIC BATCH V9.1
- Memory corruption
- CVSS 7.1 High
NULL pointer dereference in Siemens OpenPCS 7 V9.1 and others
- Siemens OpenPCS 7 V9.1
- Siemens SIMATIC BATCH V9.1
- Memory corruption