Product by Siemens

Siemens SIMATIC PCS 7

25 known vulnerabilities in Siemens SIMATIC PCS 7 (Siemens), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Siemens SIMATIC PCS 7 (Siemens)

High	CVE-2017-12069	OCP Foundation Local Discovery Server: XML External Entity (XXE) also in 1 other product	8.2	30.08.2017
Medium	CVE-2017-14023	Siemens SIMATIC PCS 7: Improper Input Validation also in 1 other product	4.9	06.11.2017
Not rated	CVE-2014-8551	Siemens SIMATIC WinCC: Code Execution also in 2 other products	—	26.11.2014
Not rated	CVE-2013-0674	Siemens WinCC: Buffer Overflow also in 1 other product	—	21.03.2013
Not rated	CVE-2012-3030	Siemens WinCC: security vulnerability also in 1 other product	—	18.09.2012
Not rated	CVE-2012-3032	Siemens WinCC: SQL Injection also in 1 other product	—	18.09.2012
Not rated	CVE-2013-0679	Siemens WinCC: Path Traversal also in 1 other product	—	21.03.2013
Not rated	CVE-2012-3034	Siemens WinCC: security vulnerability also in 1 other product	—	18.09.2012
Not rated	CVE-2012-3031	Siemens WinCC: Cross-Site Scripting (XSS) also in 1 other product	—	18.09.2012
Not rated	CVE-2014-8552	Siemens SIMATIC WinCC: security vulnerability also in 2 other products	—	26.11.2014
Not rated	CVE-2013-3958	Siemens WinCC: security vulnerability also in 1 other product	—	14.06.2013
Not rated	CVE-2013-0677	Siemens WinCC: Information Disclosure also in 1 other product	—	21.03.2013
Not rated	CVE-2013-3957	Siemens WinCC: SQL Injection also in 1 other product	—	14.06.2013
Not rated	CVE-2014-4682	Siemens WinCC: Information Disclosure also in 1 other product	—	24.07.2014
Not rated	CVE-2013-0676	Siemens WinCC: Information Disclosure also in 1 other product	—	21.03.2013
Not rated	CVE-2013-0678	Siemens WinCC: Information Disclosure also in 1 other product	—	21.03.2013
Not rated	CVE-2014-4684	Siemens WinCC: Privilege Escalation also in 1 other product	—	24.07.2014
Not rated	CVE-2013-3959	Siemens WinCC: security vulnerability also in 1 other product	—	14.06.2013
Medium	CVE-2016-7165	Siemens SIMATIC WinCC: security vulnerability also in 12 other products	6.4	15.11.2016
Not rated	CVE-2014-4683	Siemens WinCC: Privilege Escalation also in 1 other product	—	24.07.2014
Not rated	CVE-2014-4686	Siemens WinCC: Information Disclosure also in 1 other product	—	24.07.2014
Not rated	CVE-2013-0675	Siemens WinCC: Buffer Overflow also in 1 other product	—	21.03.2013
Not rated	CVE-2012-3028	Siemens WinCC: Cross-Site Request Forgery (CSRF) also in 1 other product	—	18.09.2012
Not rated	CVE-2012-3015	Siemens SIMATIC PCS 7: Privilege Escalation also in 1 other product	—	26.07.2012
Not rated	CVE-2014-4685	Siemens WinCC: Privilege Escalation also in 1 other product	—	24.07.2014

News

SSA-535640 (Last Update: 2019-01-08): Vulnerability in Industrial Productssiemens-productcert

All products by Siemens

Key figures

Vulnerabilities

News