Known vulnerabilities in SIMATIC NET PC Software

Known vulnerabilities in SIMATIC NET PC Software

Vendor: Siemens

Software: SIMATIC NET PC Software

Software CPE: cpe:2.3:a:siemens:simatic_net_pc_software:*:*:*:*:*:*:*:*

Website: https://www.siemens.com/

Total vulnerabilities: 9

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Vulnerabilities (9)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU77319 - Use of Obsolete Function CVE-2023-28829	CWE-477	Low	No	No	-	14.06.2023	SB2023061441
#VU75039 - Incorrect Permission Assignment for Critical Resource CVE-2022-44725	CWE-732	Low	No	No	-	12.04.2023	SB2023041248 SB2023041249 SB2024041517
#VU63312 - Memory corruption CVE-2021-40142	CWE-119	Medium	No	No	14 SP1 Update 14, 17 SP1	17.05.2022	SB2021082715 SB2022051720
#VU63304 - NULL Pointer Dereference CVE-2021-45117	CWE-476	Medium	No	No	14 SP1 Update 14, 17 SP1	17.05.2022	SB2022032134 SB2022051719
#VU28936 - Unquoted Search Path or Element CVE-2020-7580	CWE-428	Low	No	No	16 Upd3	10.06.2020	SB2020061031
#VU25259 - Memory corruption CVE-2019-19282	CWE-119	Medium	No	No	-	12.02.2020	SB2020021208
#VU21971 - Improper input validation CVE-2019-6575	CWE-20	Medium	No	No	-	21.10.2019	SB2019041713
#VU11448 - Improper input validation CVE-2018-4832	CWE-20	Low	No	No	-	02.04.2018	SB2018040201 SB2019121918
#VU8071 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2017-12069	CWE-611	Low	No	No	-	01.09.2017	SB2017090106