[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f8aYqlsAx4S3ZFkUShDaSlKA_0-3XKOYR9-NsygJQSpo":3,"g5a-ex:siemens\u002Fsimatic_pcs7@*":113,"g5a-family:siemens\u002Fsimatic_pcs7":115},{"success":4,"data":5},true,{"product":6,"versions":27,"topVulnerabilitiesByEpss":32,"kevVulnerabilities":90,"seoMetadata":91,"meta":110},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":26},"siemens","simatic_pcs7",4,25,0,"2017-11-06",[14,18,21,23],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"7.1",12,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"8.0",16,{"version":22,"cve_count":9,"kev_count":11,"has_kev":17},"8.1",{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},"8.2",2,"Simatic Pcs7 by Siemens is a technology product with 4 tracked versions and 25 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[28,29,30,31],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":9,"kev_count":11,"has_kev":17},{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},[33,41,48,54,62,68,73,77,82,86],{"cveId":34,"description":35,"publishedDate":36,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":17,"epssScore":40},"CVE-2014-8551","The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before Update 2; SIMATIC PCS 7 7.1 through SP4, 8.0 through SP2, and 8.1; and TIA Portal 13 before Update 6 allows remote attackers to execute arbitrary code via crafted packets.","2014-11-26",10,"v2","Critical",0.05271,{"cveId":42,"description":43,"publishedDate":12,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":17,"epssScore":47},"CVE-2017-14023","An Improper Input Validation issue was discovered in Siemens SIMATIC PCS 7 V8.1 prior to V8.1 SP1 with WinCC V7.3 Upd 13, and V8.2 all versions. The improper input validation vulnerability has been identified, which may allow an authenticated remote attacker who is a member of the administrators group to crash services by sending specially crafted messages to the DCOM interface.",4.9,"v3.1","Medium",0.03675,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":52,"cvssVersion":38,"severity":46,"isKev":17,"epssScore":53},"CVE-2013-0674","Buffer overflow in the RegReader ActiveX control in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote attackers to execute arbitrary code via a long parameter.","2013-03-21",6.8,0.03361,{"cveId":55,"description":56,"publishedDate":57,"cvssScore":58,"cvssVersion":59,"severity":60,"isKev":17,"epssScore":61},"CVE-2017-12069","An XXE vulnerability has been identified in OPC Foundation UA .NET Sample Code before 2017-03-21 and Local Discovery Server (LDS) before 1.03.367. Among the affected products are Siemens SIMATIC PCS7 (All versions V8.1 and earlier), SIMATIC WinCC (All versions \u003C V7.4 SP1), SIMATIC WinCC Runtime Professional (All versions \u003C V14 SP1), SIMATIC NET PC Software, and SIMATIC IT Production Suite. By sending specially crafted packets to the OPC Discovery Server at port 4840\u002Ftcp, an attacker might cause the system to access various resources chosen by the attacker.","2017-08-30",8.2,"v3.0","High",0.02904,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":66,"cvssVersion":38,"severity":46,"isKev":17,"epssScore":67},"CVE-2012-3030","WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, stores sensitive information under the web root with insufficient access control, which allows remote attackers to read a (1) log file or (2) configuration file via a direct request.","2012-09-18",5,0.02638,{"cveId":69,"description":70,"publishedDate":65,"cvssScore":71,"cvssVersion":38,"severity":60,"isKev":17,"epssScore":72},"CVE-2012-3032","SQL injection vulnerability in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to execute arbitrary SQL commands via a crafted SOAP message.",7.5,0.02405,{"cveId":74,"description":75,"publishedDate":51,"cvssScore":9,"cvssVersion":38,"severity":46,"isKev":17,"epssScore":76},"CVE-2013-0679","Directory traversal vulnerability in the web server in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote authenticated users to read arbitrary files via vectors involving a query for a pathname.",0.02328,{"cveId":78,"description":79,"publishedDate":65,"cvssScore":80,"cvssVersion":38,"severity":46,"isKev":17,"epssScore":81},"CVE-2012-3034","WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to discover a username and password via crafted parameters to unspecified methods in ActiveX controls.",4.3,0.02159,{"cveId":83,"description":84,"publishedDate":65,"cvssScore":80,"cvssVersion":38,"severity":46,"isKev":17,"epssScore":85},"CVE-2012-3031","Multiple cross-site scripting (XSS) vulnerabilities in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allow remote attackers to inject arbitrary web script or HTML via a (1) GET parameter, (2) POST parameter, or (3) Referer HTTP header.",0.02142,{"cveId":87,"description":88,"publishedDate":36,"cvssScore":66,"cvssVersion":38,"severity":46,"isKev":17,"epssScore":89},"CVE-2014-8552","The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before Update 2; SIMATIC PCS 7 7.1 through SP4, 8.0 through SP2, and 8.1; and TIA Portal 13 before Update 6 allows remote attackers to read arbitrary files via crafted packets.",0.02047,[],{"title":92,"metaDescription":93,"keywords":94,"structuredData":95},"Simatic Pcs7 by Siemens - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Simatic Pcs7 by Siemens covering 4 versions with 25 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Simatic Pcs7 vulnerabilities, Simatic Pcs7 security, Simatic Pcs7 CVE, Siemens Simatic Pcs7, Simatic Pcs7 threat intelligence, Siemens security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":96,"@type":97,"name":98,"description":93,"url":99,"manufacturer":100,"applicationCategory":104,"softwareVersion":105,"mainEntity":106},"https:\u002F\u002Fschema.org","SoftwareApplication","Simatic Pcs7","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsiemens\u002Fsimatic_pcs7",{"@type":101,"name":102,"url":103},"Organization","Siemens","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsiemens","Security Software","4 versions tracked",{"@type":107,"name":108,"description":109,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Simatic Pcs7 Security Vulnerabilities","Security vulnerabilities affecting Simatic Pcs7 by Siemens",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":111,"apiVersion":112},"2026-10-19T00:23:52.383Z","3.0",{"rows":114,"total":11,"capped":17,"failed":11},[],[]]