Known vulnerabilities in SIMATIC WinCC (TIA Portal)

Vendor: Siemens
Software: SIMATIC WinCC (TIA Portal)
Software CPE: cpe:2.3:a:siemens:simatic_wincc_tia_portal:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SIMATIC WinCC (TIA Portal) SIMATIC WinCC (TIA Portal) is affected by 5 known vulnerabilities: 2 medium, 3 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU25259 - Memory corruption
CVE-2019-19282		 CWE-119 Medium
No
No
 13 SP2 12.02.2020 SB2020021208
#VU15889 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2018-13814		 CWE-113 Low
No
No
 15 Update 4 13.11.2018 SB2018111410
#VU14416 - Incorrect Default Permissions
CVE-2018-11454		 CWE-276 Low
No
No
 14.0 Update 6, 15.0 Update 2 15.08.2018 SB2018081511
#VU14415 - Incorrect Default Permissions
CVE-2018-11453		 CWE-276 Low
No
No
 14.0 Update 6, 15.0 Update 2 14.08.2018 SB2018081511
#VU9594 - Improper input validation
CVE-2017-3737		 CWE-20 Medium
No
No
 - 08.12.2017 SB2017120804
SB2017120902
SB2017121001
and 21 more