[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fe--jenFz3aH-cK1I7cZYedgHCvBJtEKkNxK1lRXWGOA":3,"g5a-ex:siemens\u002Fsimatic_wincc_runtime_professional@*":117,"g5a-family:siemens\u002Fsimatic_wincc_runtime_professional":119},{"success":4,"data":5},true,{"product":6,"versions":32,"topVulnerabilitiesByEpss":40,"kevVulnerabilities":94,"seoMetadata":95,"meta":114},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":31},"siemens","simatic_wincc_runtime_professional",7,9,0,"2024-02-13",[14,18,20,22,24,26,28],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"13",1,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"14",{"version":21,"cve_count":11,"kev_count":11,"has_kev":17},"15",{"version":23,"cve_count":11,"kev_count":11,"has_kev":17},"16",{"version":25,"cve_count":16,"kev_count":11,"has_kev":17},"17",{"version":27,"cve_count":11,"kev_count":11,"has_kev":17},"18",{"version":29,"cve_count":30,"kev_count":11,"has_kev":17},"19",2,"Simatic Wincc Runtime Professional by Siemens is a technology product with 7 tracked versions and 9 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[33,34,35,36,37,38,39],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":11,"kev_count":11,"has_kev":17},{"version":23,"cve_count":11,"kev_count":11,"has_kev":17},{"version":25,"cve_count":16,"kev_count":11,"has_kev":17},{"version":27,"cve_count":11,"kev_count":11,"has_kev":17},{"version":29,"cve_count":30,"kev_count":11,"has_kev":17},[41,49,57,63,67,74,80,83,88],{"cveId":42,"description":43,"publishedDate":44,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":17,"epssScore":48},"CVE-2016-5743","Siemens SIMATIC WinCC before 7.3 Update 10 and 7.4 before Update 1, SIMATIC BATCH before 8.1 SP1 Update 9 as distributed in SIMATIC PCS 7 through 8.1 SP1, SIMATIC OpenPCS 7 before 8.1 Update 3 as distributed in SIMATIC PCS 7 through 8.1 SP1, SIMATIC OpenPCS 7 before 8.2 Update 1 as distributed in SIMATIC PCS 7 8.2, and SIMATIC WinCC Runtime Professional before 13 SP1 Update 9 allow remote attackers to execute arbitrary code via crafted packets.","2016-07-22",9.8,"v3.0","Critical",0.10491,{"cveId":50,"description":51,"publishedDate":52,"cvssScore":53,"cvssVersion":54,"severity":55,"isKev":17,"epssScore":56},"CVE-2018-4832","A vulnerability has been identified in OpenPCS 7 V7.1 and earlier (All versions), OpenPCS 7 V8.0 (All versions), OpenPCS 7 V8.1 (All versions \u003C V8.1 Upd5), OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions \u003C V9.0 Upd1), SIMATIC BATCH V7.1 and earlier (All versions), SIMATIC BATCH V8.0 (All versions \u003C V8.0 SP1 Upd21), SIMATIC BATCH V8.1 (All versions \u003C V8.1 SP1 Upd16), SIMATIC BATCH V8.2 (All versions \u003C V8.2 Upd10), SIMATIC BATCH V9.0 (All versions \u003C V9.0 SP1), SIMATIC NET PC Software V14 (All versions \u003C V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions \u003C 15 SP1), SIMATIC PCS 7 V7.1 and earlier (All versions), SIMATIC PCS 7 V8.0 (All versions), SIMATIC PCS 7 V8.1 (All versions), SIMATIC PCS 7 V8.2 (All versions \u003C V8.2 SP1), SIMATIC PCS 7 V9.0 (All versions \u003C V9.0 SP1), SIMATIC Route Control V7.1 and earlier (All versions), SIMATIC Route Control V8.0 (All versions), SIMATIC Route Control V8.1 (All versions), SIMATIC Route Control V8.2 (All versions), SIMATIC Route Control V9.0 (All versions \u003C V9.0 Upd1), SIMATIC WinCC Runtime Professional V13 (All versions \u003C V13 SP2 Upd2), SIMATIC WinCC Runtime Professional V14 (All versions \u003C V14 SP1 Upd5), SIMATIC WinCC V7.2 and earlier (All versions \u003C WinCC 7.2 Upd 15), SIMATIC WinCC V7.3 (All versions \u003C WinCC 7.3 Upd 16), SIMATIC WinCC V7.4 (All versions \u003C V7.4 SP1 Upd 4), SPPA-T3000 Application Server (All versions \u003C Service Pack R8.2 SP2). Specially crafted messages sent to the RPC service of the affected products could cause a Denial-of-Service condition on the remote and local communication functionality of the affected products. A reboot of the system is required to recover the remote and local communication functionality. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.","2018-04-24",7.5,"v3.1","High",0.0242,{"cveId":58,"description":59,"publishedDate":60,"cvssScore":61,"cvssVersion":54,"severity":55,"isKev":17,"epssScore":62},"CVE-2019-10918","A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions \u003C V8.1 with WinCC V7.3 Upd 19), SIMATIC PCS 7 V8.2 (All versions \u003C V8.2 SP1 with WinCC V7.4 SP1 Upd11), SIMATIC PCS 7 V9.0 (All versions \u003C V9.0 SP2 with WinCC V7.4 SP1 Upd11), SIMATIC WinCC (TIA Portal) V13 (All versions), SIMATIC WinCC (TIA Portal) V14 (All versions \u003C V14 SP1 Upd 9), SIMATIC WinCC (TIA Portal) V15 (All versions \u003C V15.1 Upd 3), SIMATIC WinCC Runtime Professional V13 (All versions), SIMATIC WinCC Runtime Professional V14 (All versions \u003C V14.1 Upd 8), SIMATIC WinCC Runtime Professional V15 (All versions \u003C V15.1 Upd 3), SIMATIC WinCC V7.2 and earlier (All versions), SIMATIC WinCC V7.3 (All versions \u003C V7.3 Upd 19), SIMATIC WinCC V7.4 (All versions \u003C V7.4 SP1 Upd 11), SIMATIC WinCC V7.5 (All versions \u003C V7.5 Upd 3). An authenticatd attacker with network access to the DCOM interface could execute arbitrary commands with SYSTEM privileges. The vulnerability could be exploited by an attacker with network access to the affected system. Successful exploitation requires authentication with a low-privileged user account and no user interaction. An attacker could use the vulnerability to compromise confidentiality and integrity and availability of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known.","2019-05-14",8.8,0.01926,{"cveId":64,"description":65,"publishedDate":60,"cvssScore":61,"cvssVersion":54,"severity":55,"isKev":17,"epssScore":66},"CVE-2019-10916","A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions \u003C V8.1 with WinCC V7.3 Upd 19), SIMATIC PCS 7 V8.2 (All versions \u003C V8.2 SP1 with WinCC V7.4 SP1 Upd11), SIMATIC PCS 7 V9.0 (All versions \u003C V9.0 SP2 with WinCC V7.4 SP1 Upd11), SIMATIC WinCC (TIA Portal) V13 (All versions), SIMATIC WinCC (TIA Portal) V14 (All versions \u003C V14 SP1 Upd 9), SIMATIC WinCC (TIA Portal) V15 (All versions \u003C V15.1 Upd 3), SIMATIC WinCC Runtime Professional V13 (All versions), SIMATIC WinCC Runtime Professional V14 (All versions \u003C V14.1 Upd 8), SIMATIC WinCC Runtime Professional V15 (All versions \u003C V15.1 Upd 3), SIMATIC WinCC V7.2 and earlier (All versions), SIMATIC WinCC V7.3 (All versions \u003C V7.3 Upd 19), SIMATIC WinCC V7.4 (All versions \u003C V7.4 SP1 Upd 11), SIMATIC WinCC V7.5 (All versions \u003C V7.5 Upd 3). An attacker with access to the project file could run arbitrary system commands with the privileges of the local database server. The vulnerability could be exploited by an attacker with access to the project file. The vulnerability does impact the confidentiality, integrity, and availability of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known.",0.01541,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":71,"cvssVersion":54,"severity":72,"isKev":17,"epssScore":73},"CVE-2020-7580","A vulnerability has been identified in SIMATIC Automation Tool (All versions \u003C V4 SP2), SIMATIC NET PC Software V14 (All versions \u003C V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions), SIMATIC NET PC Software V16 (All versions \u003C V16 Upd3), SIMATIC PCS neo (All versions \u003C V3.0 SP1), SIMATIC ProSave (All versions \u003C V17), SIMATIC S7-1500 Software Controller (All versions \u003C V21.8), SIMATIC STEP 7 (TIA Portal) V13 (All versions \u003C V13 SP2 Update 4), SIMATIC STEP 7 (TIA Portal) V14 (All versions \u003C V14 SP1 Update 10), SIMATIC STEP 7 (TIA Portal) V15 (All versions \u003C V15.1 Update 5), SIMATIC STEP 7 (TIA Portal) V16 (All versions \u003C V16 Update 2), SIMATIC STEP 7 V5 (All versions \u003C V5.6 SP2 HF3), SIMATIC WinCC OA V3.16 (All versions \u003C V3.16 P018), SIMATIC WinCC OA V3.17 (All versions \u003C V3.17 P003), SIMATIC WinCC Runtime Advanced (All versions \u003C V16 Update 2), SIMATIC WinCC Runtime Professional V13 (All versions \u003C V13 SP2 Update 4), SIMATIC WinCC Runtime Professional V14 (All versions \u003C V14 SP1 Update 10), SIMATIC WinCC Runtime Professional V15 (All versions \u003C V15.1 Update 5), SIMATIC WinCC Runtime Professional V16 (All versions \u003C V16 Update 2), SIMATIC WinCC V7.4 (All versions \u003C V7.4 SP1 Update 14), SIMATIC WinCC V7.5 (All versions \u003C V7.5 SP1 Update 3), SINAMICS STARTER (All Versions \u003C V5.4 HF2), SINAMICS Startdrive (All Versions \u003C V16 Update 3), SINEC NMS (All versions \u003C V1.0 SP2), SINEMA Server (All versions \u003C V14 SP3), SINUMERIK ONE virtual (All Versions \u003C V6.14), SINUMERIK Operate (All Versions \u003C V6.14). A common component used by the affected applications regularly calls a helper binary with SYSTEM privileges while the call path is not quoted. This could allow a local attacker to execute arbitrary code with SYTEM privileges.","2020-06-10",6.7,"Medium",0.0046,{"cveId":75,"description":76,"publishedDate":12,"cvssScore":77,"cvssVersion":78,"severity":55,"isKev":17,"epssScore":79},"CVE-2023-48363","A vulnerability has been identified in OpenPCS 7 V9.1 (All versions \u003C V9.1 SP2 UC05), SIMATIC BATCH V9.1 (All versions \u003C V9.1 SP2 UC05), SIMATIC PCS 7 V9.1 (All versions \u003C V9.1 SP2 UC05), SIMATIC Route Control V9.1 (All versions \u003C V9.1 SP2 UC05), SIMATIC WinCC Runtime Professional V18 (All versions \u003C V18 Update 4), SIMATIC WinCC Runtime Professional V19 (All versions \u003C V19 Update 2), SIMATIC WinCC V7.4 (All versions), SIMATIC WinCC V7.5 (All versions \u003C V7.5 SP2 Update 15), SIMATIC WinCC V8.0 (All versions \u003C V8.0 Update 4). The implementation of the RPC (Remote Procedure call) \r\ncommunication protocol in the affected products do not \r\nproperly handle certain unorganized RPC messages. An \r\nattacker could use this vulnerability to cause a denial of service \r\ncondition in the RPC server.",7.1,"v4.0",0.0027,{"cveId":81,"description":82,"publishedDate":12,"cvssScore":77,"cvssVersion":78,"severity":55,"isKev":17,"epssScore":79},"CVE-2023-48364","A vulnerability has been identified in OpenPCS 7 V9.1 (All versions \u003C V9.1 SP2 UC05), SIMATIC BATCH V9.1 (All versions \u003C V9.1 SP2 UC05), SIMATIC PCS 7 V9.1 (All versions \u003C V9.1 SP2 UC05), SIMATIC Route Control V9.1 (All versions \u003C V9.1 SP2 UC05), SIMATIC WinCC Runtime Professional V18 (All versions \u003C V18 Update 4), SIMATIC WinCC Runtime Professional V19 (All versions \u003C V19 Update 2), SIMATIC WinCC V7.4 (All versions), SIMATIC WinCC V7.5 (All versions \u003C V7.5 SP2 Update 15), SIMATIC WinCC V8.0 (All versions \u003C V8.0 Update 4). The implementation of the RPC (Remote Procedure call) communication protocol in the affected products do not properly handle certain malformed RPC messages. An attacker could use this vulnerability to cause a denial of service condition in the RPC server.",{"cveId":84,"description":85,"publishedDate":60,"cvssScore":86,"cvssVersion":54,"severity":72,"isKev":17,"epssScore":87},"CVE-2019-10917","A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions \u003C V8.1 with WinCC V7.3 Upd 19), SIMATIC PCS 7 V8.2 (All versions \u003C V8.2 SP1 with WinCC V7.4 SP1 Upd11), SIMATIC PCS 7 V9.0 (All versions \u003C V9.0 SP2 with WinCC V7.4 SP1 Upd11), SIMATIC WinCC (TIA Portal) V13 (All versions), SIMATIC WinCC (TIA Portal) V14 (All versions \u003C V14 SP1 Upd 9), SIMATIC WinCC (TIA Portal) V15 (All versions \u003C V15.1 Upd 3), SIMATIC WinCC Runtime Professional V13 (All versions), SIMATIC WinCC Runtime Professional V14 (All versions \u003C V14.1 Upd 8), SIMATIC WinCC Runtime Professional V15 (All versions \u003C V15.1 Upd 3), SIMATIC WinCC V7.2 and earlier (All versions), SIMATIC WinCC V7.3 (All versions \u003C V7.3 Upd 19), SIMATIC WinCC V7.4 (All versions \u003C V7.4 SP1 Upd 11), SIMATIC WinCC V7.5 (All versions \u003C V7.5 Upd 3). An attacker with local access to the project file could cause a Denial-of-Service condition on the affected product while the project file is loaded. Successful exploitation requires access to the project file. An attacker could use the vulnerability to compromise availability of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known.",5.5,0.00265,{"cveId":89,"description":90,"publishedDate":91,"cvssScore":92,"cvssVersion":54,"severity":55,"isKev":17,"epssScore":93},"CVE-2022-24287","A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions \u003C V9.0 SP3 UC06), SIMATIC PCS 7 V9.1 (All versions \u003C V9.1 SP1 UC01), SIMATIC WinCC Runtime Professional V16 and earlier (All versions), SIMATIC WinCC Runtime Professional V17 (All versions \u003C V17 Upd4), SIMATIC WinCC V7.3 (All versions), SIMATIC WinCC V7.4 (All versions \u003C V7.4 SP1 Update 21), SIMATIC WinCC V7.5 (All versions \u003C V7.5 SP2 Update 8). A missing printer configuration on the host could allow an authenticated attacker to escape the WinCC Kiosk Mode.","2022-05-20",7.8,0.00238,[],{"title":96,"metaDescription":97,"keywords":98,"structuredData":99},"Simatic Wincc Runtime Professional by Siemens - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Simatic Wincc Runtime Professional by Siemens covering 7 versions with 9 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Simatic Wincc Runtime Professional vulnerabilities, Simatic Wincc Runtime Professional security, Simatic Wincc Runtime Professional CVE, Siemens Simatic Wincc Runtime Professional, Simatic Wincc Runtime Professional threat intelligence, Siemens security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":100,"@type":101,"name":102,"description":97,"url":103,"manufacturer":104,"applicationCategory":108,"softwareVersion":109,"mainEntity":110},"https:\u002F\u002Fschema.org","SoftwareApplication","Simatic Wincc Runtime Professional","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsiemens\u002Fsimatic_wincc_runtime_professional",{"@type":105,"name":106,"url":107},"Organization","Siemens","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsiemens","Security Software","7 versions tracked",{"@type":111,"name":112,"description":113,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Simatic Wincc Runtime Professional Security Vulnerabilities","Security vulnerabilities affecting Simatic Wincc Runtime Professional by Siemens",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":115,"apiVersion":116},"2026-10-19T00:24:36.812Z","3.0",{"rows":118,"total":11,"capped":17,"failed":11},[],[]]