Known vulnerabilities in SIMATIC PCS 7 7.1

Vendor: Siemens
Software: SIMATIC PCS 7
Version: 7.1
Software CPE: cpe:2.3:a:siemens:simatic_pcs_7:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 6
Public exploits: 0
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SIMATIC PCS 7 version 7.1 SIMATIC PCS 7 7.1 is affected by 6 vulnerabilities: 2 critical, 1 high, 1 medium, 2 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU18656 - Improper Access Control
CVE-2019-10922		 CWE-284 High
No
No
 - 31.05.2019 SB2019051415
#VU11448 - Improper input validation
CVE-2018-4832		 CWE-20 Low
No
No
 - 02.04.2018 SB2018040201
SB2019121918
#VU8071 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2017-12069		 CWE-611 Low
No
No
 - 01.09.2017 SB2017090106
#VU6192 - Untrusted Search Path
CVE-2012-3015		 CWE-426 Critical
No
Exploited
 - 05.04.2017 SB2012072401
#VU6191 - Exposure of sensitive information to an unauthorized actor
CVE-2014-8552		 CWE-200 Medium
No
No
 - 05.04.2017 SB2014121901
#VU6190 - Improper input validation
CVE-2014-8551		 CWE-20 Critical
No
Exploited
 - 05.04.2017 SB2014121901