Advisories · Technology

Siemens SIMATIC WinCC Runtime Professional V19.

Every CVE that names Siemens SIMATIC WinCC Runtime Professional V19 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-35783 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Execution with unnecessary privileges in Siemens SIMATIC BATCH V9.1 and others
- Siemens SIMATIC BATCH V9.1
- Siemens SIMATIC Information Server 2020
- Privilege escalation
Not analysed yet 10 Sept 2024
CVE-2024-30321 CVE record

CVSS 8.2 High

Exposure of personal information in Siemens SIMATIC PCS 7 V9.1 and others
- Siemens SIMATIC PCS 7 V9.1
- Siemens SIMATIC WinCC Runtime Professional V18
- Information disclosure
Not analysed yet 9 Jul 2024
CVE-2023-46280 CVE record

CVSS 8.2 High

Out-of-bounds read in Siemens Security Configuration Tool (SCT) and others
- Siemens Security Configuration Tool (SCT)
- Siemens SIMATIC Automation Tool
- Memory corruption
Not analysed yet 14 May 2024
CVE-2023-50821 CVE record

CVSS 6.9 Medium

Buffer overflow in Siemens SIMATIC PCS 7 V9.1 and others
- Siemens SIMATIC PCS 7 V9.1
- Siemens SIMATIC WinCC Runtime Professional V17
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2023-48364 CVE record

CVSS 7.1 High

NULL pointer dereference in Siemens OpenPCS 7 V9.1 and others
- Siemens OpenPCS 7 V9.1
- Siemens SIMATIC BATCH V9.1
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2023-48363 CVE record

CVSS 7.1 High

NULL pointer dereference in Siemens OpenPCS 7 V9.1 and others
- Siemens OpenPCS 7 V9.1
- Siemens SIMATIC BATCH V9.1
- Memory corruption
Not analysed yet 13 Feb 2024