Advisories · Technology

Siemens SIMATIC WinCC V7.4.

Every CVE that names Siemens SIMATIC WinCC V7.4 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-35783 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Execution with unnecessary privileges in Siemens SIMATIC BATCH V9.1 and others
- Siemens SIMATIC BATCH V9.1
- Siemens SIMATIC Information Server 2020
- Privilege escalation
Not analysed yet 10 Sept 2024
CVE-2024-30321 CVE record

CVSS 8.2 High

Exposure of personal information in Siemens SIMATIC PCS 7 V9.1 and others
- Siemens SIMATIC PCS 7 V9.1
- Siemens SIMATIC WinCC Runtime Professional V18
- Information disclosure
Not analysed yet 9 Jul 2024
CVE-2023-48364 CVE record

CVSS 7.1 High

NULL pointer dereference in Siemens OpenPCS 7 V9.1 and others
- Siemens OpenPCS 7 V9.1
- Siemens SIMATIC BATCH V9.1
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2023-48363 CVE record

CVSS 7.1 High

NULL pointer dereference in Siemens OpenPCS 7 V9.1 and others
- Siemens OpenPCS 7 V9.1
- Siemens SIMATIC BATCH V9.1
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2022-24287 CVE record

CVSS 7.8 High

Siemens SIMATIC PCS 7 V8.2: A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions)…
- Siemens SIMATIC PCS 7 V8.2
- Siemens SIMATIC PCS 7 V9.0
- CWE-1188
Not analysed yet 10 May 2022
CVE-2021-40363 CVE record

Siemens SIMATIC PCS 7 V8.2: A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions)…
- Siemens SIMATIC PCS 7 V8.2
- Siemens SIMATIC PCS 7 V9.0
- Information disclosure
Not analysed yet 9 Feb 2022
CVE-2021-40360 CVE record

Information disclosure in Siemens SIMATIC PCS 7 V8.2 and others
- Siemens SIMATIC PCS 7 V8.2
- Siemens SIMATIC PCS 7 V9.0
- Information disclosure
Not analysed yet 9 Feb 2022
CVE-2021-40364 CVE record

CVSS 5.5 Medium

Sensitive information in log files in Siemens SIMATIC PCS 7 V8.2 and others
- Siemens SIMATIC PCS 7 V8.2
- Siemens SIMATIC PCS 7 V9.0
- Information disclosure
Not analysed yet 9 Nov 2021
CVE-2021-40359 CVE record

CVSS 7.7 High

Path traversal in Siemens OpenPCS 7 V8.2 and others
- Siemens OpenPCS 7 V8.2
- Siemens OpenPCS 7 V9.0
- Path traversal
Not analysed yet 9 Nov 2021
CVE-2021-40358 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Path traversal in Siemens SIMATIC PCS 7 V8.2 and others
- Siemens SIMATIC PCS 7 V8.2
- Siemens SIMATIC PCS 7 V9.0
- Path traversal
Not analysed yet 9 Nov 2021
CVE-2020-7580 CVE record

Unquoted search path in Siemens SIMATIC Automation Tool and others
- Siemens SIMATIC Automation Tool
- Siemens SIMATIC NET PC Software V14
- CWE-428
Not analysed yet 10 Jun 2020