Known vulnerabilities in Siemens SIMATIC WinCC 7.3 Update 1
Vendor:
Siemens
Software:
Siemens SIMATIC WinCC
Version:
7.3 Update 1
Software CPE:
cpe:2.3:a:siemens:siemens_simatic_wincc:*:*:*:*:*:*:*:*
Website:
https://www.siemens.com/
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
7.5 SP2 Update 16
8.0 SP4
7.5 SP2 Update 15
7.5.2.13
8.0
7.5 SP2 Update 8
17 Update 2
16 Update 5
7.5 SP2 Update 6
14
17
16
15
7.5 SP2
7.5 SP1 Update 3
7.4 SP1 Update 14
7.5.1 Upd1
7.5
7.4 Sp1 Update 11
7.4 SP1
7.5 Update 2
5.0 SP1
6.0 SP2
6.0 SP3
6.0 SP4
7.1 SP1
7.5 Update 3
7.4 Update 11
15 Update 4
7.3 Update 2
7.3 Update 1
7.2 Update 9
7.2 Update 8
7.2 Update 7
7.2 Update 6
7.2 Update 5
7.2 Update 4
7.2 Update 3
7.2 Update 2
7.2 Update 1
7.0 SP3
7.0 SP2
7.0 SP1
-
7.3
13.0
11.0
12.0
7.2
7.1
6.0
5.0
7.0
v11
7.4
6.2
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU19158 - Unrestricted Upload of File with Dangerous Type CVE-2019-10935 |
CWE-434 | Medium | 7.4 Sp1 Update 11, 7.5 Update 3 | 12.07.2019 |
SB2019071205 |
||
| #VU18656 - Improper Access Control CVE-2019-10922 |
CWE-284 | High | - | 31.05.2019 |
SB2019051415 |
||
| #VU6191 - Exposure of sensitive information to an unauthorized actor CVE-2014-8552 |
CWE-200 | Medium | - | 05.04.2017 |
SB2014121901 |
||
| #VU6190 - Improper input validation CVE-2014-8551 |
CWE-20 | Critical | - | 05.04.2017 |
SB2014121901 |