Simatic Pcs7 (Siemens) - vulnerabilities (CVEs)

26 CVEs, 0 in the last 30 days, 12 known versions, newest CVE from 2024-09-10. Vendor: Siemens.

CVEs of Simatic Pcs7

CVE-2024-35783 - CVSS 9.4 (critical), 2024-09-10: A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All versions < V2020 SP2 Update 5), SIMATIC…
CVE-2017-14023 - CVSS 4.9 (medium), 2017-11-06: An Improper Input Validation issue was discovered in Siemens SIMATIC PCS 7 V8.1 prior to V8.1 SP1 with WinCC V7.3 Upd 13, and V8.2 all versions. The improper…
CVE-2017-12069 - CVSS 8.2 (high), 2017-08-30: An XXE vulnerability has been identified in OPC Foundation UA .NET Sample Code before 2017-03-21 and Local Discovery Server (LDS) before 1.03.367. Among the…
CVE-2016-7165 - CVSS 6.4 (medium), 2016-11-15: A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC IT Production Suite (All versions < V7.0 SP1 HFX 2),…
CVE-2014-8552 - CVSS 5 (medium), 2014-11-26: The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before Update 2; SIMATIC PCS 7 7.1 through SP4, 8.0 through SP2, and…
CVE-2014-8551 - CVSS 10 (critical), 2014-11-26: The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before Update 2; SIMATIC PCS 7 7.1 through SP4, 8.0 through SP2, and…
CVE-2014-4682 - CVSS 5 (medium), 2014-07-24: The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote attackers to obtain sensitive information via…
CVE-2014-4685 - CVSS 4.6 (medium), 2014-07-24: Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows local users to gain privileges by leveraging weak system-object access control.
CVE-2014-4684 - CVSS 6 (medium), 2014-07-24: The database server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a…
CVE-2014-4683 - CVSS 4.9 (medium), 2014-07-24: The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a…
CVE-2014-4686 - CVSS 6.8 (medium), 2014-07-24: The Project administration application in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, has a hardcoded encryption key, which allows…
CVE-2013-3957 - CVSS 7.5 (high), 2013-06-14: SQL injection vulnerability in the login screen in the Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and earlier and…
CVE-2013-3959 - CVSS 4 (medium), 2013-06-14: The Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and earlier and other products, exhibits different behavior for…
CVE-2013-3958 - CVSS 7.5 (high), 2013-06-14: The login implementation in the Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and earlier and other products, has a…
CVE-2013-0676 - CVSS 4 (medium), 2013-03-21: Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, does not properly assign privileges for the database containing…
CVE-2013-0679 - CVSS 4 (medium), 2013-03-21: Directory traversal vulnerability in the web server in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote…
CVE-2013-0675 - CVSS 6.1 (medium), 2013-03-21: Buffer overflow in CCEServer (aka the central communications component) in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other…
CVE-2013-0678 - CVSS 4 (medium), 2013-03-21: Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, does not properly represent WebNavigator credentials in a database, which…
CVE-2013-0674 - CVSS 6.8 (medium), 2013-03-21: Buffer overflow in the RegReader ActiveX control in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote…
CVE-2013-0677 - CVSS 5.8 (medium), 2013-03-21: The web server in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote attackers to obtain sensitive information…
CVE-2012-3030 - CVSS 5 (medium), 2012-09-18: WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, stores sensitive information under the web root with…
CVE-2012-3034 - CVSS 4.3 (medium), 2012-09-18: WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to discover a username and password via…
CVE-2012-3028 - CVSS 6.8 (medium), 2012-09-18: Cross-site request forgery (CSRF) vulnerability in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows…
CVE-2012-3032 - CVSS 7.5 (high), 2012-09-18: SQL injection vulnerability in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to…
CVE-2012-3031 - CVSS 4.3 (medium), 2012-09-18: Multiple cross-site scripting (XSS) vulnerabilities in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allow…
CVE-2012-3015 - CVSS 6.9 (medium), 2012-07-26: Untrusted search path vulnerability in Siemens SIMATIC STEP7 before 5.5 SP1, as used in SIMATIC PCS7 7.1 SP3 and earlier and other products, allows local…