Known vulnerabilities in Siemens SIMATIC WinCC

Vendor: Siemens
Software: Siemens SIMATIC WinCC
Software CPE: cpe:2.3:a:siemens:siemens_simatic_wincc:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 25
Public exploits: 0
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Siemens SIMATIC WinCC Siemens SIMATIC WinCC is affected by 25 known vulnerabilities: 1 critical, 2 high, 7 medium, 15 low Critical High Medium Low

Vulnerabilities (25)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88481 - Memory corruption
CVE-2023-50821		 CWE-119 Low
No
No
 7.5 SP2 Update 16 11.04.2024 SB2024041145
#VU86607 - NULL Pointer Dereference
CVE-2023-48364		 CWE-476 Low
No
No
 7.5 SP2 Update 15, 8.0 SP4 20.02.2024 SB2024022016
#VU86606 - NULL Pointer Dereference
CVE-2023-48363		 CWE-476 Low
No
No
 7.5 SP2 Update 15, 8.0 SP4 20.02.2024 SB2024022016
#VU77319 - Use of Obsolete Function
CVE-2023-28829		 CWE-477 Low
No
No
 8.0 14.06.2023 SB2023061441
#VU77318 - Incorrect Permission Assignment for Critical Resource
CVE-2023-30897		 CWE-732 Low
No
No
 7.5.2.13 14.06.2023 SB2023061440
#VU75039 - Incorrect Permission Assignment for Critical Resource
CVE-2022-44725		 CWE-732 Low
No
No
 8.0 12.04.2023 SB2023041248
SB2023041249
SB2024041517
#VU63312 - Memory corruption
CVE-2021-40142		 CWE-119 Medium
No
No
 - 17.05.2022 SB2021082715
SB2022051720
#VU63303 - Missing initialization of resource
CVE-2022-24287		 CWE-909 Low
No
No
 7.5 SP2 Update 8 17.05.2022 SB2022051718
#VU60534 - Exposure of sensitive information to an unauthorized actor
CVE-2021-40360		 CWE-200 Low
No
No
 7.5 SP2 Update 6, 16 Update 5, 17 Update 2 11.02.2022 SB2022021107
#VU60533 - File And Directory Information Exposure
CVE-2021-40363		 CWE-538 Low
No
No
 7.5 SP2 Update 6, 16 Update 5 11.02.2022 SB2022021106
#VU58237 - Information Exposure Through Log Files
CVE-2021-40364		 CWE-532 Low
No
No
 - 18.11.2021 SB2021111815
#VU58236 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-40359		 CWE-22 Medium
No
No
 - 18.11.2021 SB2021111815
#VU58235 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-40358		 CWE-22 Medium
No
No
 - 18.11.2021 SB2021111815
#VU50644 - Improper Authentication
CVE-2020-10048		 CWE-287 Low
No
No
 7.5 SP2 11.02.2021 SB2021021127
#VU28936 - Unquoted Search Path or Element
CVE-2020-7580		 CWE-428 Low
No
No
 7.4 SP1 Update 14, 7.5 SP1 Update 3 10.06.2020 SB2020061031
#VU25259 - Memory corruption
CVE-2019-19282		 CWE-119 Medium
No
No
 7.5.1 Upd1 12.02.2020 SB2020021208
#VU19158 - Unrestricted Upload of File with Dangerous Type
CVE-2019-10935		 CWE-434 Medium
No
No
 7.4 Sp1 Update 11, 7.5 Update 3 12.07.2019 SB2019071205
#VU18656 - Improper Access Control
CVE-2019-10922		 CWE-284 High
No
No
 - 31.05.2019 SB2019051415
#VU15888 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2018-13813		 CWE-601 Low
No
No
 15 Update 4 14.11.2018 SB2018111410
#VU15887 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-13812		 CWE-22 Medium
No
No
 15 Update 4 13.11.2018 SB2018111410


Showing elements 1 - 20 out of 25