Known vulnerabilities in SIMATIC STEP 7 (TIA Portal)
Vendor:
Siemens
Software:
SIMATIC STEP 7 (TIA Portal)
Software CPE:
cpe:2.3:a:siemens:simatic_step_7_tia_portal:*:*:*:*:*:*:*:*
Website:
https://www.siemens.com/
Total vulnerabilities:
10
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
Vulnerabilities (10)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU84392 - Cleartext Storage of Sensitive Information CVE-2022-46141 |
CWE-312 | Low | 19 | 13.12.2023 |
SB2023121337 |
||
| #VU62478 - Improper Access Control CVE-2021-42029 |
CWE-284 | Low | 16 Update 5, 17 Update 2 | 21.04.2022 |
SB2022042135 |
||
| #VU29948 - Improper input validation CVE-2020-7588 |
CWE-20 | Medium | 16.0 Update 2 | 15.07.2020 |
SB2020071533 |
||
| #VU29945 - Resource exhaustion CVE-2020-7587 |
CWE-400 | Medium | 16.0 Update 2 | 15.07.2020 |
SB2020071533 |
||
| #VU29944 - Unquoted Search Path or Element CVE-2020-7581 |
CWE-428 | Low | 16.0 Update 2 | 15.07.2020 |
SB2020071533 |
||
| #VU28936 - Unquoted Search Path or Element CVE-2020-7580 |
CWE-428 | Low | - | 10.06.2020 |
SB2020061031 |
||
| #VU15894 - Exposure of sensitive information to an unauthorized actor CVE-2018-13811 |
CWE-200 | Low | 15.1 | 13.11.2018 |
SB2018111413 |
||
| #VU14416 - Incorrect Default Permissions CVE-2018-11454 |
CWE-276 | Low | 14.0 Update 6, 15.0 Update 2 | 15.08.2018 |
SB2018081511 |
||
| #VU14415 - Incorrect Default Permissions CVE-2018-11453 |
CWE-276 | Low | 14.0 Update 6, 15.0 Update 2 | 14.08.2018 |
SB2018081511 |
||
| #VU9594 - Improper input validation CVE-2017-3737 |
CWE-20 | Medium | - | 08.12.2017 |
SB2017120804 SB2017120902 SB2017121001 and 21 more |