Known vulnerabilities in Siemens SIMATIC WinCC 16
Vendor:
Siemens
Software:
Siemens SIMATIC WinCC
Version:
16
Software CPE:
cpe:2.3:a:siemens:siemens_simatic_wincc:*:*:*:*:*:*:*:*
Website:
https://www.siemens.com/
Total vulnerabilities:
5
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Vulnerabilities by Severity
7.5 SP2 Update 16
8.0 SP4
7.5 SP2 Update 15
7.5.2.13
8.0
7.5 SP2 Update 8
17 Update 2
16 Update 5
7.5 SP2 Update 6
14
17
16
15
7.5 SP2
7.5 SP1 Update 3
7.4 SP1 Update 14
7.5.1 Upd1
7.5
7.4 Sp1 Update 11
7.4 SP1
7.5 Update 2
5.0 SP1
6.0 SP2
6.0 SP3
6.0 SP4
7.1 SP1
7.5 Update 3
7.4 Update 11
15 Update 4
7.3 Update 2
7.3 Update 1
7.2 Update 9
7.2 Update 8
7.2 Update 7
7.2 Update 6
7.2 Update 5
7.2 Update 4
7.2 Update 3
7.2 Update 2
7.2 Update 1
7.0 SP3
7.0 SP2
7.0 SP1
-
7.3
13.0
11.0
12.0
7.2
7.1
6.0
5.0
7.0
v11
7.4
6.2
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU60534 - Exposure of sensitive information to an unauthorized actor CVE-2021-40360 |
CWE-200 | Low | 7.5 SP2 Update 6, 16 Update 5, 17 Update 2 | 11.02.2022 |
SB2022021107 |
||
| #VU60533 - File And Directory Information Exposure CVE-2021-40363 |
CWE-538 | Low | 7.5 SP2 Update 6, 16 Update 5 | 11.02.2022 |
SB2022021106 |
||
| #VU58237 - Information Exposure Through Log Files CVE-2021-40364 |
CWE-532 | Low | - | 18.11.2021 |
SB2021111815 |
||
| #VU58236 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-40359 |
CWE-22 | Medium | - | 18.11.2021 |
SB2021111815 |
||
| #VU58235 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-40358 |
CWE-22 | Medium | - | 18.11.2021 |
SB2021111815 |