Simatic Step 7 (Siemens) - vulnerabilities (CVEs)

21 CVEs, 0 in the last 30 days, 45 known versions, newest CVE from 2024-11-12. Vendor: Siemens.

CVEs of Simatic Step 7

CVE-2023-32736 - CVSS 7.3 (high), 2024-11-12: A vulnerability has been identified in SIMATIC S7-PLCSIM V16 (All versions), SIMATIC S7-PLCSIM V17 (All versions), SIMATIC STEP 7 Safety V16 (All versions),…
CVE-2023-32737 - CVSS 7 (high), 2024-07-09: A vulnerability has been identified in SIMATIC STEP 7 Safety V18 (All versions < V18 Update 2). Affected applications do not properly restrict the .NET…
CVE-2023-32735 - CVSS 7 (high), 2024-07-09: A vulnerability has been identified in SIMATIC STEP 7 Safety V16 (All versions < V16 Update 7), SIMATIC STEP 7 Safety V17 (All versions < V17 Update 7),…
CVE-2022-45147 - CVSS 8.5 (high), 2024-07-09: A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC STEP 7 V16 (All versions), SIMATIC STEP 7 V17 (All versions), SIMATIC STEP…
CVE-2022-46141 - CVSS 5.5 (medium), 2023-12-12: A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All versions < V19). An information disclosure vulnerability could allow a local attacker…
CVE-2023-25910 - CVSS 10 (critical), 2023-06-13: A vulnerability has been identified in SIMATIC PCS 7 (All versions < V9.1 SP2 UC04), SIMATIC S7-PM (All versions < V5.7 SP1 HF1), SIMATIC S7-PM (All versions…
CVE-2021-42029 - CVSS 7.8 (high), 2022-04-12: A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) V15 (All versions), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 5), SIMATIC…
CVE-2020-7588 - CVSS 5.3 (medium), 2020-07-14: A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter…
CVE-2020-7587 - CVSS 8.2 (high), 2020-07-14: A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter…
CVE-2020-7581 - CVSS 6.7 (medium), 2020-07-14: A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter…
CVE-2020-7586 - CVSS 7.8 (high), 2020-06-10: A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions…
CVE-2020-7585 - CVSS 7.8 (high), 2020-06-10: A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions…
CVE-2020-7580 - CVSS 6.7 (medium), 2020-06-10: A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14),…
CVE-2019-10929 - CVSS 5.9 (medium), 2019-08-13: A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions),…
CVE-2016-7165 - CVSS 6.4 (medium), 2016-11-15: A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC IT Production Suite (All versions < V7.0 SP1 HFX 2),…
CVE-2016-7960 - CVSS 2.5 (low), 2016-10-13: Siemens SIMATIC STEP 7 (TIA Portal) before 14 uses an improper format for managing TIA project files during version updates, which makes it easier for local…
CVE-2016-7959 - CVSS 4.7 (medium), 2016-10-13: Siemens SIMATIC STEP 7 (TIA Portal) before 14 improperly stores pre-shared key data in TIA project files, which makes it easier for local users to obtain…
CVE-2015-1602 - CVSS 2.1 (low), 2015-04-06: Siemens SIMATIC STEP 7 (TIA Portal) 12 and 13 before 13 SP1 Upd1 improperly stores password data within project files, which makes it easier for local users…
CVE-2015-1601 - CVSS 6.8 (medium), 2015-04-06: Siemens SIMATIC STEP 7 (TIA Portal) 12 and 13 before 13 SP1 Upd1 allows man-in-the-middle attackers to obtain sensitive information or modify transmitted data…
CVE-2015-1594 - CVSS 6.9 (medium), 2015-03-07: Untrusted search path vulnerability in Siemens SIMATIC ProSave before 13 SP1; SIMATIC CFC before 8.0 SP4 Upd9 and 8.1 before Upd1; SIMATIC STEP 7 before 5.5…
CVE-2015-1356 - CVSS 4.4 (medium), 2015-02-18: Siemens SIMATIC STEP 7 (TIA Portal) before 13 SP1 determines a user's privileges on the basis of project-file fields that lack integrity protection, which…
CVE-2015-1355 - CVSS 2.1 (low), 2015-02-18: Siemens SIMATIC STEP 7 (TIA Portal) before 13 SP1 uses a weak password-hash algorithm, which makes it easier for local users to determine cleartext passwords…
CVE-2012-3015 - CVSS 6.9 (medium), 2012-07-26: Untrusted search path vulnerability in Siemens SIMATIC STEP7 before 5.5 SP1, as used in SIMATIC PCS7 7.1 SP3 and earlier and other products, allows local…