Product by Siemens

    Siemens SIMATIC STEP 7 (TIA Portal)

    19 known vulnerabilities in Siemens SIMATIC STEP 7 (TIA Portal) (Siemens), 0 of them actively exploited (CISA KEV).

    Key figures

    19

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Siemens SIMATIC STEP 7 (TIA Portal) (Siemens)
    HighCVE-2020-7587

    Siemens Opcenter Execution Discrete: Uncontrolled Resource Consumption

    also in 19 other products

    8.2
    CriticalCVE-2023-25910

    Siemens SIMATIC PCS 7: Code Injection

    also in 2 other products

    10.0
    MediumCVE-2020-7588

    Siemens Opcenter Execution Discrete: Improper Input Validation

    also in 19 other products

    5.3
    MediumCVE-2019-10929

    Siemens SIMATIC CP 1626: Use of a Broken or Risky Cryptographic Algorithm

    also in 31 other products

    5.9
    HighCVE-2020-7585

    Siemens SIMATIC PDM: Uncontrolled Search Path Element

    also in 7 other products

    7.8
    HighCVE-2020-7586

    Siemens SIMATIC PDM: Heap-based Buffer Overflow

    also in 7 other products

    7.8
    MediumCVE-2020-7580

    Siemens SIMATIC Automation Tool: Unquoted Search Path or Element

    also in 28 other products

    6.7
    Not ratedCVE-2015-1601

    Siemens SIMATIC STEP 7: Information Disclosure

    —
    MediumCVE-2020-7581

    Siemens Opcenter Execution Discrete: Unquoted Search Path or Element

    also in 17 other products

    6.7
    HighCVE-2021-42029

    Siemens SIMATIC STEP 7 (TIA Portal) V15: Improper Access Control

    also in 2 other products

    7.8
    MediumCVE-2016-7165

    Siemens SIMATIC WinCC: security vulnerability

    also in 12 other products

    6.4
    MediumCVE-2016-7959

    Siemens SIMATIC STEP 7: Information Disclosure

    4.7
    MediumCVE-2022-46141

    Siemens SIMATIC STEP 7 (TIA Portal): Cleartext Storage of Sensitive Information in Memory

    also in 1 other product

    4.2
    LowCVE-2016-7960

    Siemens SIMATIC STEP 7: security vulnerability

    2.5
    Not ratedCVE-2015-1356

    Siemens SIMATIC STEP 7: security vulnerability

    —
    Not ratedCVE-2012-3015

    Siemens SIMATIC PCS 7: Privilege Escalation

    also in 1 other product

    —
    Not ratedCVE-2015-1594

    Siemens SIMATIC STEP 7: Privilege Escalation

    also in 1 other product

    —
    Not ratedCVE-2015-1355

    Siemens SIMATIC STEP 7: security vulnerability

    —
    Not ratedCVE-2015-1602

    Siemens SIMATIC STEP 7: security vulnerability

    —

    News

    All products by Siemens