Advisories · Technology

Siemens SIMATIC WinCC V15 and earlier.

Every CVE that names Siemens SIMATIC WinCC V15 and earlier among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-40363 CVE record

Siemens SIMATIC PCS 7 V8.2: A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions)…
- Siemens SIMATIC PCS 7 V8.2
- Siemens SIMATIC PCS 7 V9.0
- Information disclosure
Not analysed yet 9 Feb 2022
CVE-2021-40360 CVE record

Information disclosure in Siemens SIMATIC PCS 7 V8.2 and others
- Siemens SIMATIC PCS 7 V8.2
- Siemens SIMATIC PCS 7 V9.0
- Information disclosure
Not analysed yet 9 Feb 2022
CVE-2021-40364 CVE record

CVSS 5.5 Medium

Sensitive information in log files in Siemens SIMATIC PCS 7 V8.2 and others
- Siemens SIMATIC PCS 7 V8.2
- Siemens SIMATIC PCS 7 V9.0
- Information disclosure
Not analysed yet 9 Nov 2021
CVE-2021-40359 CVE record

CVSS 7.7 High

Path traversal in Siemens OpenPCS 7 V8.2 and others
- Siemens OpenPCS 7 V8.2
- Siemens OpenPCS 7 V9.0
- Path traversal
Not analysed yet 9 Nov 2021
CVE-2021-40358 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Path traversal in Siemens SIMATIC PCS 7 V8.2 and others
- Siemens SIMATIC PCS 7 V8.2
- Siemens SIMATIC PCS 7 V9.0
- Path traversal
Not analysed yet 9 Nov 2021