[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpyFPhSh3nj7asBJk5wCf1aDM_o3nnrhFB4ZcuuWu6p0":3,"g5a-ex:siemens\u002Fsimatic_wincc@*":155,"g5a-family:siemens\u002Fsimatic_wincc":157},{"success":4,"data":5},true,{"product":6,"versions":57,"topVulnerabilitiesByEpss":74,"kevVulnerabilities":132,"seoMetadata":133,"meta":152},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":56},"siemens","simatic_wincc",16,30,0,"2024-02-13",[14,18,21,24,27,29,31,34,36,38,40,42,45,48,51,53],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"13",4,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"14",1,{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},"14.0.1",3,{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},"15",6,{"version":28,"cve_count":16,"kev_count":11,"has_kev":17},"15.1",{"version":30,"cve_count":26,"kev_count":11,"has_kev":17},"16",{"version":32,"cve_count":33,"kev_count":11,"has_kev":17},"17",5,{"version":35,"cve_count":20,"kev_count":11,"has_kev":17},"6.2",{"version":37,"cve_count":33,"kev_count":11,"has_kev":17},"7.0",{"version":39,"cve_count":11,"kev_count":11,"has_kev":17},"7.1",{"version":41,"cve_count":33,"kev_count":11,"has_kev":17},"7.2",{"version":43,"cve_count":44,"kev_count":11,"has_kev":17},"7.3",10,{"version":46,"cve_count":47,"kev_count":11,"has_kev":17},"7.4",14,{"version":49,"cve_count":50,"kev_count":11,"has_kev":17},"7.5",15,{"version":52,"cve_count":20,"kev_count":11,"has_kev":17},"7.5.1",{"version":54,"cve_count":55,"kev_count":11,"has_kev":17},"8.0",2,"Simatic Wincc by Siemens is a technology product with 16 tracked versions and 30 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},{"version":28,"cve_count":16,"kev_count":11,"has_kev":17},{"version":30,"cve_count":26,"kev_count":11,"has_kev":17},{"version":32,"cve_count":33,"kev_count":11,"has_kev":17},{"version":35,"cve_count":20,"kev_count":11,"has_kev":17},{"version":37,"cve_count":33,"kev_count":11,"has_kev":17},{"version":39,"cve_count":11,"kev_count":11,"has_kev":17},{"version":41,"cve_count":33,"kev_count":11,"has_kev":17},{"version":43,"cve_count":44,"kev_count":11,"has_kev":17},{"version":46,"cve_count":47,"kev_count":11,"has_kev":17},{"version":49,"cve_count":50,"kev_count":11,"has_kev":17},{"version":52,"cve_count":20,"kev_count":11,"has_kev":17},{"version":54,"cve_count":55,"kev_count":11,"has_kev":17},[75,83,89,95,103,108,113,118,122,127],{"cveId":76,"description":77,"publishedDate":78,"cvssScore":79,"cvssVersion":80,"severity":81,"isKev":17,"epssScore":82},"CVE-2016-5743","Siemens SIMATIC WinCC before 7.3 Update 10 and 7.4 before Update 1, SIMATIC BATCH before 8.1 SP1 Update 9 as distributed in SIMATIC PCS 7 through 8.1 SP1, SIMATIC OpenPCS 7 before 8.1 Update 3 as distributed in SIMATIC PCS 7 through 8.1 SP1, SIMATIC OpenPCS 7 before 8.2 Update 1 as distributed in SIMATIC PCS 7 8.2, and SIMATIC WinCC Runtime Professional before 13 SP1 Update 9 allow remote attackers to execute arbitrary code via crafted packets.","2016-07-22",9.8,"v3.0","Critical",0.10491,{"cveId":84,"description":85,"publishedDate":86,"cvssScore":44,"cvssVersion":87,"severity":81,"isKev":17,"epssScore":88},"CVE-2014-8551","The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before Update 2; SIMATIC PCS 7 7.1 through SP4, 8.0 through SP2, and 8.1; and TIA Portal 13 before Update 6 allows remote attackers to execute arbitrary code via crafted packets.","2014-11-26","v2",0.05271,{"cveId":90,"description":91,"publishedDate":78,"cvssScore":92,"cvssVersion":80,"severity":93,"isKev":17,"epssScore":94},"CVE-2016-5744","Siemens SIMATIC WinCC 7.0 through SP3 and 7.2 allows remote attackers to read arbitrary WinCC station files via crafted packets.",7.5,"High",0.04399,{"cveId":96,"description":97,"publishedDate":98,"cvssScore":99,"cvssVersion":100,"severity":101,"isKev":17,"epssScore":102},"CVE-2017-14023","An Improper Input Validation issue was discovered in Siemens SIMATIC PCS 7 V8.1 prior to V8.1 SP1 with WinCC V7.3 Upd 13, and V8.2 all versions. The improper input validation vulnerability has been identified, which may allow an authenticated remote attacker who is a member of the administrators group to crash services by sending specially crafted messages to the DCOM interface.","2017-11-06",4.9,"v3.1","Medium",0.03675,{"cveId":104,"description":105,"publishedDate":106,"cvssScore":79,"cvssVersion":100,"severity":81,"isKev":17,"epssScore":107},"CVE-2019-10922","A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 and newer (All versions), SIMATIC WinCC V7.2 and earlier (All versions), SIMATIC WinCC V7.3 and newer (All versions). An attacker with network access to affected installations, which are configured without \"Encrypted Communication\", can execute arbitrary code. The security vulnerability could be exploited by an unauthenticated attacker with network access to the affected installation. No user interaction is required to exploit this security vulnerability. The vulnerability impacts confidentiality, integrity, and availability of the device. At the time of advisory publication no public exploitation of this security vulnerability was known.","2019-05-14",0.0264,{"cveId":109,"description":110,"publishedDate":111,"cvssScore":92,"cvssVersion":100,"severity":93,"isKev":17,"epssScore":112},"CVE-2021-40142","In OPC Foundation Local Discovery Server (LDS) before 1.04.402.463, remote attackers can cause a denial of service (DoS) by sending carefully crafted messages that lead to Access of a Memory Location After the End of a Buffer.","2021-08-27",0.02563,{"cveId":114,"description":115,"publishedDate":116,"cvssScore":92,"cvssVersion":100,"severity":93,"isKev":17,"epssScore":117},"CVE-2018-4832","A vulnerability has been identified in OpenPCS 7 V7.1 and earlier (All versions), OpenPCS 7 V8.0 (All versions), OpenPCS 7 V8.1 (All versions \u003C V8.1 Upd5), OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions \u003C V9.0 Upd1), SIMATIC BATCH V7.1 and earlier (All versions), SIMATIC BATCH V8.0 (All versions \u003C V8.0 SP1 Upd21), SIMATIC BATCH V8.1 (All versions \u003C V8.1 SP1 Upd16), SIMATIC BATCH V8.2 (All versions \u003C V8.2 Upd10), SIMATIC BATCH V9.0 (All versions \u003C V9.0 SP1), SIMATIC NET PC Software V14 (All versions \u003C V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions \u003C 15 SP1), SIMATIC PCS 7 V7.1 and earlier (All versions), SIMATIC PCS 7 V8.0 (All versions), SIMATIC PCS 7 V8.1 (All versions), SIMATIC PCS 7 V8.2 (All versions \u003C V8.2 SP1), SIMATIC PCS 7 V9.0 (All versions \u003C V9.0 SP1), SIMATIC Route Control V7.1 and earlier (All versions), SIMATIC Route Control V8.0 (All versions), SIMATIC Route Control V8.1 (All versions), SIMATIC Route Control V8.2 (All versions), SIMATIC Route Control V9.0 (All versions \u003C V9.0 Upd1), SIMATIC WinCC Runtime Professional V13 (All versions \u003C V13 SP2 Upd2), SIMATIC WinCC Runtime Professional V14 (All versions \u003C V14 SP1 Upd5), SIMATIC WinCC V7.2 and earlier (All versions \u003C WinCC 7.2 Upd 15), SIMATIC WinCC V7.3 (All versions \u003C WinCC 7.3 Upd 16), SIMATIC WinCC V7.4 (All versions \u003C V7.4 SP1 Upd 4), SPPA-T3000 Application Server (All versions \u003C Service Pack R8.2 SP2). Specially crafted messages sent to the RPC service of the affected products could cause a Denial-of-Service condition on the remote and local communication functionality of the affected products. A reboot of the system is required to recover the remote and local communication functionality. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.","2018-04-24",0.0242,{"cveId":119,"description":120,"publishedDate":86,"cvssScore":33,"cvssVersion":87,"severity":101,"isKev":17,"epssScore":121},"CVE-2014-8552","The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before Update 2; SIMATIC PCS 7 7.1 through SP4, 8.0 through SP2, and 8.1; and TIA Portal 13 before Update 6 allows remote attackers to read arbitrary files via crafted packets.",0.02047,{"cveId":123,"description":124,"publishedDate":106,"cvssScore":125,"cvssVersion":100,"severity":93,"isKev":17,"epssScore":126},"CVE-2019-10918","A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions \u003C V8.1 with WinCC V7.3 Upd 19), SIMATIC PCS 7 V8.2 (All versions \u003C V8.2 SP1 with WinCC V7.4 SP1 Upd11), SIMATIC PCS 7 V9.0 (All versions \u003C V9.0 SP2 with WinCC V7.4 SP1 Upd11), SIMATIC WinCC (TIA Portal) V13 (All versions), SIMATIC WinCC (TIA Portal) V14 (All versions \u003C V14 SP1 Upd 9), SIMATIC WinCC (TIA Portal) V15 (All versions \u003C V15.1 Upd 3), SIMATIC WinCC Runtime Professional V13 (All versions), SIMATIC WinCC Runtime Professional V14 (All versions \u003C V14.1 Upd 8), SIMATIC WinCC Runtime Professional V15 (All versions \u003C V15.1 Upd 3), SIMATIC WinCC V7.2 and earlier (All versions), SIMATIC WinCC V7.3 (All versions \u003C V7.3 Upd 19), SIMATIC WinCC V7.4 (All versions \u003C V7.4 SP1 Upd 11), SIMATIC WinCC V7.5 (All versions \u003C V7.5 Upd 3). An authenticatd attacker with network access to the DCOM interface could execute arbitrary commands with SYSTEM privileges. The vulnerability could be exploited by an attacker with network access to the affected system. Successful exploitation requires authentication with a low-privileged user account and no user interaction. An attacker could use the vulnerability to compromise confidentiality and integrity and availability of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known.",8.8,0.01926,{"cveId":128,"description":129,"publishedDate":130,"cvssScore":99,"cvssVersion":80,"severity":101,"isKev":17,"epssScore":131},"CVE-2017-6867","A vulnerability was discovered in Siemens SIMATIC WinCC (V7.3 before Upd 11 and V7.4 before SP1), SIMATIC WinCC Runtime Professional (V13 before SP2 and V14 before SP1), SIMATIC WinCC (TIA Portal) Professional (V13 before SP2 and V14 before SP1) that could allow an authenticated, remote attacker who is member of the \"administrators\" group to crash services by sending specially crafted messages to the DCOM interface.","2017-05-11",0.01923,[],{"title":134,"metaDescription":135,"keywords":136,"structuredData":137},"Simatic Wincc by Siemens - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Simatic Wincc by Siemens covering 16 versions with 30 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Simatic Wincc vulnerabilities, Simatic Wincc security, Simatic Wincc CVE, Siemens Simatic Wincc, Simatic Wincc threat intelligence, Siemens security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":138,"@type":139,"name":140,"description":135,"url":141,"manufacturer":142,"applicationCategory":146,"softwareVersion":147,"mainEntity":148},"https:\u002F\u002Fschema.org","SoftwareApplication","Simatic Wincc","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsiemens\u002Fsimatic_wincc",{"@type":143,"name":144,"url":145},"Organization","Siemens","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsiemens","Security Software","16 versions tracked",{"@type":149,"name":150,"description":151,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Simatic Wincc Security Vulnerabilities","Security vulnerabilities affecting Simatic Wincc by Siemens",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":153,"apiVersion":154},"2026-10-17T21:05:17.877Z","3.0",{"rows":156,"total":11,"capped":17,"failed":11},[],[158,160,163,166,169,172,174,176,178,180,182,184],{"product":159,"cves":47},"simatic_wincc_\\(tia_portal\\)",{"product":161,"cves":162},"simatic_wincc_runtime",13,{"product":164,"cves":165},"simatic_wincc_runtime_advanced",12,{"product":167,"cves":168},"simatic_wincc_runtime_professional",9,{"product":170,"cves":171},"simatic_wincc_open_architecture",8,{"product":173,"cves":26},"simatic_wincc_sm\\@rtclient",{"product":175,"cves":16},"simatic_wincc_oa",{"product":177,"cves":55},"simatic_wincc_sm\\@rtclient_lite",{"product":179,"cves":20},"simatic_wincc_flexible_2008",{"product":181,"cves":20},"simatic_wincc_unified_scada_runtime",{"product":183,"cves":20},"simatic_wincc_flexible_runtime",{"product":185,"cves":20},"simatic_wincc_oa_operator"]