Product by Siemens

    Siemens SIMATIC PCS 7

    25 known vulnerabilities in Siemens SIMATIC PCS 7 (Siemens), 0 of them actively exploited (CISA KEV).

    Key figures

    25

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Siemens SIMATIC PCS 7 (Siemens)
    CriticalCVE-2019-10922

    Siemens SIMATIC PCS 7: Missing Authentication for Critical Function

    also in 3 other products

    		9.8
    HighCVE-2019-10918

    Siemens SIMATIC WinCC: Exposed Dangerous Method or Function

    also in 17 other products

    		8.8
    HighCVE-2018-4832

    Siemens SIMATIC NET PC Software V14: Improper Input Validation

    also in 20 other products

    		7.5
    HighCVE-2019-10916

    Siemens SIMATIC WinCC: SQL Injection

    also in 17 other products

    		8.8
    CriticalCVE-2021-40358

    Siemens SIMATIC WinCC V16: Path Traversal

    also in 9 other products

    		9.9
    CriticalCVE-2023-25910

    Siemens SIMATIC PCS 7: Code Injection

    also in 2 other products

    		10.0
    HighCVE-2016-9160

    Siemens SIMATIC PCS 7: Direct Use of Unsafe JNI

    also in 1 other product

    		8.1
    HighCVE-2019-19282

    Siemens SIMATIC: Incorrect Calculation of Buffer Size

    also in 19 other products

    		7.5
    HighCVE-2019-10935

    Siemens SIMATIC WinCC: Unrestricted Upload of File with Dangerous Type

    also in 13 other products

    		7.2
    Not ratedCVE-2014-8551

    Siemens SIMATIC WinCC: Code Execution

    also in 2 other products

    		—
    HighCVE-2021-40360

    Siemens SIMATIC WinCC V16: Exposure of Sensitive Information to an Unauthorized Actor

    also in 9 other products

    		8.8
    HighCVE-2010-2772

    Siemens SIMATIC WinCC: Hard-coded Credentials

    also in 1 other product

    		7.8
    Not ratedCVE-2014-8552

    Siemens SIMATIC WinCC: security vulnerability

    also in 2 other products

    		—
    HighCVE-2020-7585

    Siemens SIMATIC PDM: Uncontrolled Search Path Element

    also in 7 other products

    		7.8
    HighCVE-2023-28829

    Siemens SIMATIC NET PC Software V14: Use of Obsolete Function

    also in 7 other products

    		8.8
    HighCVE-2020-7586

    Siemens SIMATIC PDM: Heap-based Buffer Overflow

    also in 7 other products

    		7.8
    MediumCVE-2020-7580

    Siemens SIMATIC Automation Tool: Unquoted Search Path or Element

    also in 28 other products

    		6.7
    HighCVE-2023-48364

    Siemens SIMATIC WinCC Runtime Professional V18: NULL Pointer Dereference

    also in 14 other products

    		6.5
    HighCVE-2023-48363

    Siemens SIMATIC WinCC Runtime Professional V18: NULL Pointer Dereference

    also in 14 other products

    		6.5
    HighCVE-2022-24287

    Siemens SIMATIC WinCC Runtime Professional V17: Initialization of a Resource with an Insecure Default

    also in 9 other products

    		7.8
    MediumCVE-2016-7165

    Siemens SIMATIC WinCC: security vulnerability

    also in 12 other products

    		6.4
    HighCVE-2021-40363

    Siemens SIMATIC WinCC V16: Insertion of Sensitive Information into Externally-Accessible File or Directory

    also in 9 other products

    		7.8
    MediumCVE-2020-10048

    Siemens SIMATIC PCS 7: Authentication Bypass Using an Alternate Path or Channel

    also in 1 other product

    		5.5
    MediumCVE-2019-10917

    Siemens SIMATIC WinCC: Uncaught Exception

    also in 17 other products

    		5.5
    MediumCVE-2021-40364

    Siemens SIMATIC WinCC V16: Insertion of Sensitive Information into Log File

    also in 9 other products

    		5.5

    All products by Siemens