[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fat0RFt42oIfem4ST9pSRXy_jRLMYF6F67jK7F_gS6Hk":3,"g5a-ex:siemens\u002Fsimatic_step_7@*":171,"g5a-family:siemens\u002Fsimatic_step_7":173},{"success":4,"data":5},true,{"product":6,"versions":63,"topVulnerabilitiesByEpss":86,"kevVulnerabilities":148,"seoMetadata":149,"meta":168},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":62},"siemens","simatic_step_7",22,21,0,"2023-12-12",[14,18,20,22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,53,55,57,59],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"12",1,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"12.0",{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},"13",{"version":23,"cve_count":16,"kev_count":11,"has_kev":17},"13.0",{"version":25,"cve_count":11,"kev_count":11,"has_kev":17},"13.001",{"version":27,"cve_count":11,"kev_count":11,"has_kev":17},"13.002",{"version":29,"cve_count":11,"kev_count":11,"has_kev":17},"13.003",{"version":31,"cve_count":11,"kev_count":11,"has_kev":17},"13.004",{"version":33,"cve_count":11,"kev_count":11,"has_kev":17},"13.005",{"version":35,"cve_count":11,"kev_count":11,"has_kev":17},"13.006",{"version":37,"cve_count":11,"kev_count":11,"has_kev":17},"13.007",{"version":39,"cve_count":11,"kev_count":11,"has_kev":17},"13.008",{"version":41,"cve_count":11,"kev_count":11,"has_kev":17},"13.009",{"version":43,"cve_count":11,"kev_count":11,"has_kev":17},"13.010",{"version":45,"cve_count":11,"kev_count":11,"has_kev":17},"14",{"version":47,"cve_count":11,"kev_count":11,"has_kev":17},"15",{"version":49,"cve_count":16,"kev_count":11,"has_kev":17},"15.1",{"version":51,"cve_count":52,"kev_count":11,"has_kev":17},"16",4,{"version":54,"cve_count":16,"kev_count":11,"has_kev":17},"17",{"version":56,"cve_count":11,"kev_count":11,"has_kev":17},"19",{"version":58,"cve_count":16,"kev_count":11,"has_kev":17},"5.5",{"version":60,"cve_count":61,"kev_count":11,"has_kev":17},"5.6",3,"Simatic Step 7 by Siemens is a technology product with 22 tracked versions and 21 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},{"version":23,"cve_count":16,"kev_count":11,"has_kev":17},{"version":25,"cve_count":11,"kev_count":11,"has_kev":17},{"version":27,"cve_count":11,"kev_count":11,"has_kev":17},{"version":29,"cve_count":11,"kev_count":11,"has_kev":17},{"version":31,"cve_count":11,"kev_count":11,"has_kev":17},{"version":33,"cve_count":11,"kev_count":11,"has_kev":17},{"version":35,"cve_count":11,"kev_count":11,"has_kev":17},{"version":37,"cve_count":11,"kev_count":11,"has_kev":17},{"version":39,"cve_count":11,"kev_count":11,"has_kev":17},{"version":41,"cve_count":11,"kev_count":11,"has_kev":17},{"version":43,"cve_count":11,"kev_count":11,"has_kev":17},{"version":45,"cve_count":11,"kev_count":11,"has_kev":17},{"version":47,"cve_count":11,"kev_count":11,"has_kev":17},{"version":49,"cve_count":16,"kev_count":11,"has_kev":17},{"version":51,"cve_count":52,"kev_count":11,"has_kev":17},{"version":54,"cve_count":16,"kev_count":11,"has_kev":17},{"version":56,"cve_count":11,"kev_count":11,"has_kev":17},{"version":58,"cve_count":16,"kev_count":11,"has_kev":17},{"version":60,"cve_count":61,"kev_count":11,"has_kev":17},[87,95,101,108,114,120,126,132,138,144],{"cveId":88,"description":89,"publishedDate":90,"cvssScore":91,"cvssVersion":92,"severity":93,"isKev":17,"epssScore":94},"CVE-2020-7587","A vulnerability has been identified in Opcenter Execution Discrete (All versions \u003C V3.2), Opcenter Execution Foundation (All versions \u003C V3.2), Opcenter Execution Process (All versions \u003C V3.2), Opcenter Intelligence (All versions \u003C V3.3), Opcenter Quality (All versions \u003C V11.3), Opcenter RD&L (V8.0), SIMATIC IT LMS (All versions \u003C V2.6), SIMATIC IT Production Suite (All versions \u003C V8.0), SIMATIC Notifier Server for Windows (All versions), SIMATIC PCS neo (All versions \u003C V3.0 SP1), SIMATIC STEP 7 (TIA Portal) V15 (All versions \u003C V15.1 Update 5), SIMATIC STEP 7 (TIA Portal) V16 (All versions \u003C V16 Update 2), SIMOCODE ES V15.1 (All versions \u003C V15.1 Update 4), SIMOCODE ES V16 (All versions \u003C V16 Update 1), Soft Starter ES V15.1 (All versions \u003C V15.1 Update 3), Soft Starter ES V16 (All versions \u003C V16 Update 1). Sending multiple specially crafted packets to the affected service could cause a partial remote denial-of-service, that would cause the service to restart itself. On some cases the vulnerability could leak random information from the remote service.","2020-07-14",8.2,"v3.1","High",0.02484,{"cveId":96,"description":97,"publishedDate":90,"cvssScore":98,"cvssVersion":92,"severity":99,"isKev":17,"epssScore":100},"CVE-2020-7588","A vulnerability has been identified in Opcenter Execution Discrete (All versions \u003C V3.2), Opcenter Execution Foundation (All versions \u003C V3.2), Opcenter Execution Process (All versions \u003C V3.2), Opcenter Intelligence (All versions \u003C V3.3), Opcenter Quality (All versions \u003C V11.3), Opcenter RD&L (V8.0), SIMATIC IT LMS (All versions \u003C V2.6), SIMATIC IT Production Suite (All versions \u003C V8.0), SIMATIC Notifier Server for Windows (All versions), SIMATIC PCS neo (All versions \u003C V3.0 SP1), SIMATIC STEP 7 (TIA Portal) V15 (All versions \u003C V15.1 Update 5), SIMATIC STEP 7 (TIA Portal) V16 (All versions \u003C V16 Update 2), SIMOCODE ES V15.1 (All versions \u003C V15.1 Update 4), SIMOCODE ES V16 (All versions \u003C V16 Update 1), Soft Starter ES V15.1 (All versions \u003C V15.1 Update 3), Soft Starter ES V16 (All versions \u003C V16 Update 1). Sending a specially crafted packet to the affected service could cause a partial remote denial-of-service, that would cause the service to restart itself.",5.3,"Medium",0.02151,{"cveId":102,"description":103,"publishedDate":104,"cvssScore":105,"cvssVersion":106,"severity":99,"isKev":17,"epssScore":107},"CVE-2015-1601","Siemens SIMATIC STEP 7 (TIA Portal) 12 and 13 before 13 SP1 Upd1 allows man-in-the-middle attackers to obtain sensitive information or modify transmitted data via unspecified vectors.","2015-04-06",6.8,"v2",0.01429,{"cveId":109,"description":110,"publishedDate":111,"cvssScore":112,"cvssVersion":92,"severity":93,"isKev":17,"epssScore":113},"CVE-2023-25910","A vulnerability has been identified in SIMATIC PCS 7 (All versions \u003C V9.1 SP2 UC04), SIMATIC S7-PM (All versions \u003C V5.7 SP1 HF1), SIMATIC S7-PM (All versions \u003C V5.7 SP2 HF1), SIMATIC STEP 7 V5 (All versions \u003C V5.7). The affected product contains a database management system that could allow remote users with low privileges to use embedded functions of the database (local or in a network share) that have impact on the server.\r\n\r\nAn attacker with network access to the server network could leverage these embedded functions to run code with elevated privileges in the database management system's server.","2023-06-13",8.8,0.01,{"cveId":115,"description":116,"publishedDate":117,"cvssScore":118,"cvssVersion":92,"severity":99,"isKev":17,"epssScore":119},"CVE-2019-10929","A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions \u003C V20.8), SIMATIC HMI Panel (incl. SIPLUS variants) (All versions), SIMATIC NET PC Software V14 (All versions \u003C V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions \u003C V4.4.0), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions \u003C V2.8.1), SIMATIC S7-1500 Software Controller (All versions \u003C V20.8), SIMATIC S7-PLCSIM Advanced (All versions \u003C V3.0), SIMATIC STEP 7 (TIA Portal) (All versions \u003C V16), SIMATIC WinCC (TIA Portal) (All versions \u003C V16), SIMATIC WinCC OA (All versions \u003C V3.16 P013), SIMATIC WinCC Runtime Advanced (All versions \u003C V16), SIMATIC WinCC Runtime Professional (All versions \u003C V16), TIM 1531 IRC (incl. SIPLUS NET variants) (All versions \u003C V2.1). Affected devices contain a message protection bypass vulnerability due to certain properties in the calculation used for integrity protection. This could allow an attacker in a Man-in-the-Middle position to modify network traffic sent on port 102\u002Ftcp to the affected devices.","2019-08-13",5.9,0.00978,{"cveId":121,"description":122,"publishedDate":123,"cvssScore":124,"cvssVersion":92,"severity":93,"isKev":17,"epssScore":125},"CVE-2021-31893","A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions \u003C V9.0 SP3), SIMATIC PDM (All versions \u003C V9.2), SIMATIC STEP 7 V5.X (All versions \u003C V5.6 SP2 HF3), SINAMICS STARTER (containing STEP 7 OEM version) (All versions \u003C V5.4 HF2). The affected software contains a buffer overflow vulnerability while handling certain files that could allow a local attacker to trigger a denial-of-service condition or potentially lead to remote code execution.","2021-07-13",7.8,0.00563,{"cveId":127,"description":128,"publishedDate":129,"cvssScore":130,"cvssVersion":106,"severity":99,"isKev":17,"epssScore":131},"CVE-2015-1356","Siemens SIMATIC STEP 7 (TIA Portal) before 13 SP1 determines a user's privileges on the basis of project-file fields that lack integrity protection, which allows remote attackers to establish arbitrary authorization data via a modified file.","2015-02-18",4.4,0.00512,{"cveId":133,"description":134,"publishedDate":135,"cvssScore":136,"cvssVersion":92,"severity":99,"isKev":17,"epssScore":137},"CVE-2020-7580","A vulnerability has been identified in SIMATIC Automation Tool (All versions \u003C V4 SP2), SIMATIC NET PC Software V14 (All versions \u003C V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions), SIMATIC NET PC Software V16 (All versions \u003C V16 Upd3), SIMATIC PCS neo (All versions \u003C V3.0 SP1), SIMATIC ProSave (All versions \u003C V17), SIMATIC S7-1500 Software Controller (All versions \u003C V21.8), SIMATIC STEP 7 (TIA Portal) V13 (All versions \u003C V13 SP2 Update 4), SIMATIC STEP 7 (TIA Portal) V14 (All versions \u003C V14 SP1 Update 10), SIMATIC STEP 7 (TIA Portal) V15 (All versions \u003C V15.1 Update 5), SIMATIC STEP 7 (TIA Portal) V16 (All versions \u003C V16 Update 2), SIMATIC STEP 7 V5 (All versions \u003C V5.6 SP2 HF3), SIMATIC WinCC OA V3.16 (All versions \u003C V3.16 P018), SIMATIC WinCC OA V3.17 (All versions \u003C V3.17 P003), SIMATIC WinCC Runtime Advanced (All versions \u003C V16 Update 2), SIMATIC WinCC Runtime Professional V13 (All versions \u003C V13 SP2 Update 4), SIMATIC WinCC Runtime Professional V14 (All versions \u003C V14 SP1 Update 10), SIMATIC WinCC Runtime Professional V15 (All versions \u003C V15.1 Update 5), SIMATIC WinCC Runtime Professional V16 (All versions \u003C V16 Update 2), SIMATIC WinCC V7.4 (All versions \u003C V7.4 SP1 Update 14), SIMATIC WinCC V7.5 (All versions \u003C V7.5 SP1 Update 3), SINAMICS STARTER (All Versions \u003C V5.4 HF2), SINAMICS Startdrive (All Versions \u003C V16 Update 3), SINEC NMS (All versions \u003C V1.0 SP2), SINEMA Server (All versions \u003C V14 SP3), SINUMERIK ONE virtual (All Versions \u003C V6.14), SINUMERIK Operate (All Versions \u003C V6.14). A common component used by the affected applications regularly calls a helper binary with SYSTEM privileges while the call path is not quoted. This could allow a local attacker to execute arbitrary code with SYTEM privileges.","2020-06-10",6.7,0.0046,{"cveId":139,"description":140,"publishedDate":141,"cvssScore":142,"cvssVersion":106,"severity":99,"isKev":17,"epssScore":143},"CVE-2012-3015","Untrusted search path vulnerability in Siemens SIMATIC STEP7 before 5.5 SP1, as used in SIMATIC PCS7 7.1 SP3 and earlier and other products, allows local users to gain privileges via a Trojan horse DLL in a STEP7 project folder.","2012-07-26",6.9,0.00455,{"cveId":145,"description":146,"publishedDate":135,"cvssScore":124,"cvssVersion":92,"severity":93,"isKev":17,"epssScore":147},"CVE-2020-7585","A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions \u003C V9.0 SP3), SIMATIC PDM (All versions \u003C V9.2), SIMATIC STEP 7 V5.X (All versions \u003C V5.6 SP2 HF3), SINAMICS STARTER (containing STEP 7 OEM version) (All versions \u003C V5.4 HF2). A DLL Hijacking vulnerability could allow a local attacker to execute code with elevated privileges. The security vulnerability could be exploited by an attacker with local access to the affected systems. Successful exploitation requires user privileges but no user interaction. The vulnerability could allow an attacker to compromise the availability of the system as well as to have access to confidential information.",0.00452,[],{"title":150,"metaDescription":151,"keywords":152,"structuredData":153},"Simatic Step 7 by Siemens - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Simatic Step 7 by Siemens covering 22 versions with 21 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Simatic Step 7 vulnerabilities, Simatic Step 7 security, Simatic Step 7 CVE, Siemens Simatic Step 7, Simatic Step 7 threat intelligence, Siemens security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":154,"@type":155,"name":156,"description":151,"url":157,"manufacturer":158,"applicationCategory":162,"softwareVersion":163,"mainEntity":164},"https:\u002F\u002Fschema.org","SoftwareApplication","Simatic Step 7","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsiemens\u002Fsimatic_step_7",{"@type":159,"name":160,"url":161},"Organization","Siemens","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsiemens","Security Software","22 versions tracked",{"@type":165,"name":166,"description":167,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Simatic Step 7 Security Vulnerabilities","Security vulnerabilities affecting Simatic Step 7 by Siemens",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":169,"apiVersion":170},"2026-10-17T21:05:17.775Z","3.0",{"rows":172,"total":11,"capped":17,"failed":11},[],[174,177,180],{"product":175,"cves":176},"simatic_step_7_\\(tia_portal\\)",6,{"product":178,"cves":179},"simatic_step_7_firmware",2,{"product":181,"cves":16},"simatic_step_7_micro\\\u002Fwin_smart"]