Known vulnerabilities in SIMATIC STEP 7

Vendor: Siemens
Software: SIMATIC STEP 7
Software CPE: cpe:2.3:a:siemens:simatic_step_7:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 10
Public exploits: 0
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SIMATIC STEP 7 SIMATIC STEP 7 is affected by 10 known vulnerabilities: 1 critical, 3 medium, 6 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77344 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-25910		 CWE-94 Medium
No
No
 5.7 15.06.2023 SB2023061509
#VU54870 - Incorrect Permission Assignment for Critical Resource
CVE-2021-31894		 CWE-732 Low
No
No
 5.7 14.07.2021 SB2021071421
#VU54869 - Memory corruption
CVE-2021-31893		 CWE-119 Medium
No
No
 5.6 SP2 HF3 14.07.2021 SB2021071420
#VU28936 - Unquoted Search Path or Element
CVE-2020-7580		 CWE-428 Low
No
No
 5.6 SP2 HF3 10.06.2020 SB2020061031
#VU28935 - Heap-based Buffer Overflow
CVE-2020-7586		 CWE-122 Low
No
No
 5.6 SP2 HF3 10.06.2020 SB2020061031
#VU28934 - Uncontrolled Search Path Element
CVE-2020-7585		 CWE-427 Low
No
No
 5.6 SP2 HF3 10.06.2020 SB2020061031
#VU6192 - Untrusted Search Path
CVE-2012-3015		 CWE-426 Critical
No
Exploited
 - 05.04.2017 SB2012072401
#VU995 - Cryptographic Issues
CVE-2016-7960		 CWE-310 Low
No
No
 - 14.10.2016 SB2016101309
#VU994 - Inadequate Encryption Strength
CVE-2016-7959		 CWE-326 Low
No
No
 - 13.10.2016 SB2016101308
#VU40843 - Security Features
CVE-2015-1601		 CWE-254 Medium
No
No
 - 06.04.2015 SB2015040601