Known vulnerabilities in SIMATIC WinCC

Vendor: Siemens
Software: SIMATIC WinCC
Software CPE: cpe:2.3:h:siemens:simatic_wincc:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SIMATIC WinCC SIMATIC WinCC is affected by 3 known vulnerabilities: 1 high, 1 medium, 1 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105635 - Authentication Bypass by Primary Weakness
CVE-2024-42513		 CWE-305 High
No
No
 8.0 Update 3 12.03.2025 SB2025031224
#VU97145 - Execution with Unnecessary Privileges
CVE-2024-35783		 CWE-250 Low
No
No
 7.5 SP2 Update 18, 8.0 Update 5 11.09.2024 SB2024091119
#VU94199 - Exposure of sensitive information to an unauthorized actor
CVE-2024-30321		 CWE-200 Medium
No
No
 7.4 SP1 Update 23, 7.5 SP2 Update 17, 8.0 Update 5 12.07.2024 SB2024071240