Known vulnerabilities in Siemens SIMATIC WinCC - page 2
Vendor:
Siemens
Software:
Siemens SIMATIC WinCC
Software CPE:
cpe:2.3:a:siemens:siemens_simatic_wincc:*:*:*:*:*:*:*:*
Website:
https://www.siemens.com/
Total vulnerabilities:
25
Public exploits:
0
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
7.5 SP2 Update 16
8.0 SP4
7.5 SP2 Update 15
7.5.2.13
8.0
7.5 SP2 Update 8
17 Update 2
16 Update 5
7.5 SP2 Update 6
14
17
16
15
7.5 SP2
7.5 SP1 Update 3
7.4 SP1 Update 14
7.5.1 Upd1
7.5
7.4 Sp1 Update 11
7.4 SP1
7.5 Update 2
5.0 SP1
6.0 SP2
6.0 SP3
6.0 SP4
7.1 SP1
7.5 Update 3
7.4 Update 11
15 Update 4
7.3 Update 2
7.3 Update 1
7.2 Update 9
7.2 Update 8
7.2 Update 7
7.2 Update 6
7.2 Update 5
7.2 Update 4
7.2 Update 3
7.2 Update 2
7.2 Update 1
7.0 SP3
7.0 SP2
7.0 SP1
7.3
13.0
11.0
12.0
7.2
7.1
6.0
5.0
7.0
v11
7.4
6.2
Vulnerabilities (25)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU11448 - Improper input validation CVE-2018-4832 |
CWE-20 | Low | - | 02.04.2018 |
SB2018040201 SB2019121918 |
||
| #VU8071 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2017-12069 |
CWE-611 | Low | - | 01.09.2017 |
SB2017090106 |
||
| #VU6191 - Exposure of sensitive information to an unauthorized actor CVE-2014-8552 |
CWE-200 | Medium | - | 05.04.2017 |
SB2014121901 |
||
| #VU6190 - Improper input validation CVE-2014-8551 |
CWE-20 | Critical | - | 05.04.2017 |
SB2014121901 |
||
| #VU6166 - Use of Hard-coded Password CVE-2010-2772 |
CWE-259 | High | - | 24.03.2017 |
SB2010072103 |
Showing elements 21 - 40 out of 25