Known vulnerabilities in SIMATIC WinCC Runtime Professional 13.0

Vendor: Siemens
Version: 13.0
Software CPE: cpe:2.3:a:siemens:simatic_wincc_runtime_professional:*:*:*:*:*:*:*:*
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SIMATIC WinCC Runtime Professional version 13.0 SIMATIC WinCC Runtime Professional 13.0 is affected by 4 vulnerabilities: 1 medium, 3 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU28936 - Unquoted Search Path or Element
CVE-2020-7580
CWE-428 Low
No
No
- 10.06.2020 SB2020061031
#VU19158 - Unrestricted Upload of File with Dangerous Type
CVE-2019-10935
CWE-434 Medium
No
No
- 12.07.2019 SB2019071205
#VU11448 - Improper input validation
CVE-2018-4832
CWE-20 Low
No
No
- 02.04.2018 SB2018040201
SB2019121918
#VU8071 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2017-12069
CWE-611 Low
No
No
- 01.09.2017 SB2017090106