Advisories · Technology

Siemens SIMATIC WinCC V17.

Every CVE that names Siemens SIMATIC WinCC V17 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-40759 CVE record

CVSS 8.5 High

Deserialization of untrusted data in Siemens SIMATIC S7-PLCSIM V17 and others
- Siemens SIMATIC S7-PLCSIM V17
- Siemens SIMATIC STEP 7 V17
- Insecure deserialization
Not analysed yet 12 Aug 2025
CVE-2024-54678 CVE record

CVSS 8.6 High

Deserialization of untrusted data in Siemens SIMATIC PCS neo V4.1 and others
- Siemens SIMATIC PCS neo V4.1
- Siemens SIMATIC PCS neo V5.0
- Insecure deserialization
Not analysed yet 12 Aug 2025
CVE-2024-52051 CVE record

CVSS 7.0 High

Improper input validation in Siemens SIMATIC S7-PLCSIM V17 and others
- Siemens SIMATIC S7-PLCSIM V17
- Siemens SIMATIC S7-PLCSIM V18
- CWE-20
Not analysed yet 10 Dec 2024
CVE-2024-49849 CVE record

CVSS 8.4 High

Deserialization of untrusted data in Siemens SIMATIC S7-PLCSIM V16 and others
- Siemens SIMATIC S7-PLCSIM V16
- Siemens SIMATIC S7-PLCSIM V17
- Insecure deserialization
Not analysed yet 10 Dec 2024
CVE-2023-32736 CVE record

CVSS 7.0 High

Deserialization of untrusted data in Siemens SIMATIC S7-PLCSIM V16 and others
- Siemens SIMATIC S7-PLCSIM V16
- Siemens SIMATIC S7-PLCSIM V17
- Insecure deserialization
Not analysed yet 12 Nov 2024
CVE-2023-32735 CVE record

CVSS 7.0 High

Deserialization of untrusted data in Siemens SIMATIC STEP 7 Safety V16 and others
- Siemens SIMATIC STEP 7 Safety V16
- Siemens SIMATIC STEP 7 Safety V17
- Insecure deserialization
Not analysed yet 9 Jul 2024
CVE-2021-40363 CVE record

Siemens SIMATIC PCS 7 V8.2: A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions)…
- Siemens SIMATIC PCS 7 V8.2
- Siemens SIMATIC PCS 7 V9.0
- Information disclosure
Not analysed yet 9 Feb 2022
CVE-2021-40360 CVE record

Information disclosure in Siemens SIMATIC PCS 7 V8.2 and others
- Siemens SIMATIC PCS 7 V8.2
- Siemens SIMATIC PCS 7 V9.0
- Information disclosure
Not analysed yet 9 Feb 2022
CVE-2021-40364 CVE record

CVSS 5.5 Medium

Sensitive information in log files in Siemens SIMATIC PCS 7 V8.2 and others
- Siemens SIMATIC PCS 7 V8.2
- Siemens SIMATIC PCS 7 V9.0
- Information disclosure
Not analysed yet 9 Nov 2021
CVE-2021-40359 CVE record

CVSS 7.7 High

Path traversal in Siemens OpenPCS 7 V8.2 and others
- Siemens OpenPCS 7 V8.2
- Siemens OpenPCS 7 V9.0
- Path traversal
Not analysed yet 9 Nov 2021
CVE-2021-40358 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Path traversal in Siemens SIMATIC PCS 7 V8.2 and others
- Siemens SIMATIC PCS 7 V8.2
- Siemens SIMATIC PCS 7 V9.0
- Path traversal
Not analysed yet 9 Nov 2021