Known vulnerabilities in SIMATIC WinCC Runtime Advanced
Vendor:
Siemens
Software:
SIMATIC WinCC Runtime Advanced
Software CPE:
cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:*:*:*:*:*:*:*:*
Website:
https://www.siemens.com/
Total vulnerabilities:
24
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (24)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU97431 - NULL Pointer Dereference CVE-2023-30756 |
CWE-476 | Medium | - | 17.09.2024 |
SB2024091738 |
||
| #VU97430 - NULL Pointer Dereference CVE-2023-30755 |
CWE-476 | Low | - | 17.09.2024 |
SB2024091738 |
||
| #VU97429 - NULL Pointer Dereference CVE-2023-28827 |
CWE-476 | Medium | - | 17.09.2024 |
SB2024091738 |
||
| #VU53147 - Memory corruption CVE-2021-27386 |
CWE-119 | Medium | 16 Update 4 | 12.05.2021 |
SB2021051206 |
||
| #VU53146 - Resource exhaustion CVE-2021-27385 |
CWE-400 | Medium | 16 Update 4 | 12.05.2021 |
SB2021051206 |
||
| #VU53145 - Access of Memory Location After End of Buffer CVE-2021-27384 |
CWE-788 | High | 16 Update 4 | 12.05.2021 |
SB2021051206 |
||
| #VU53144 - Memory corruption CVE-2021-27383 |
CWE-119 | Medium | 16 Update 4 | 12.05.2021 |
SB2021051206 |
||
| #VU53143 - Improper Handling of Exceptional Conditions CVE-2021-25662 |
CWE-755 | Medium | 16 Update 4 | 12.05.2021 |
SB2021051206 |
||
| #VU53142 - Access of Memory Location After End of Buffer CVE-2021-25661 |
CWE-788 | Medium | 16 Update 4 | 12.05.2021 |
SB2021051206 |
||
| #VU53141 - Access of Memory Location After End of Buffer CVE-2021-25660 |
CWE-788 | Medium | 16 Update 4 | 12.05.2021 |
SB2021051206 |
||
| #VU23011 - Out-of-bounds write CVE-2019-8280 |
CWE-787 | Medium | 16 Update 4 | 27.11.2019 |
SB2019030902 SB2021051314 |
||
| #VU23010 - Improper Initialization CVE-2019-8277 |
CWE-665 | Medium | 16 Update 4 | 27.11.2019 |
SB2019030902 SB2021051314 |
||
| #VU22995 - Improper Null Termination CVE-2019-8275 |
CWE-170 | Medium | 16 Update 4 | 26.11.2019 |
SB2019030902 SB2021051314 |
||
| #VU22968 - Out-of-bounds write CVE-2019-8265 |
CWE-787 | Medium | 16 Update 4 | 25.11.2019 |
SB2019030902 SB2021051314 |
||
| #VU22966 - Out-of-bounds write CVE-2019-8264 |
CWE-787 | Medium | 16 Update 4 | 25.11.2019 |
SB2019030902 SB2021051314 |
||
| #VU22965 - Stack-based buffer overflow CVE-2019-8263 |
CWE-121 | Medium | 16 Update 4 | 25.11.2019 |
SB2019030902 SB2021051314 |
||
| #VU22964 - Heap-based Buffer Overflow CVE-2019-8262 |
CWE-122 | Medium | 16 Update 4 | 25.11.2019 |
SB2019030902 SB2021051314 |
||
| #VU22963 - Out-of-bounds read CVE-2019-8261 |
CWE-125 | Medium | 16 Update 4 | 25.11.2019 |
SB2019030902 SB2021051314 |
||
| #VU22962 - Out-of-bounds read CVE-2019-8260 |
CWE-125 | Medium | 16 Update 4 | 25.11.2019 |
SB2019030902 SB2021051314 |
||
| #VU22961 - Missing release of memory after effective lifetime CVE-2019-8259 |
CWE-401 | Medium | 16 Update 4 | 25.11.2019 |
SB2019030902 SB2021051314 |
Showing elements 1 - 20 out of 24