Product by Siemens
Siemens Simatic Wincc Runtime
13 known vulnerabilities in Siemens Simatic Wincc Runtime (Siemens), 0 of them actively exploited (CISA KEV).
Key figures
13
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2019-6572 | Siemens SIMATIC: Exposure of Sensitive Information to an Unauthorized Actor | 9.1 | |
| High | CVE-2018-13812 | Siemens Simatic Wincc Runtime: Path Traversal | 7.5 | |
| High | CVE-2021-40142 | Siemens SIMATIC NET PC: Denial of Service | 7.5 | |
| High | CVE-2018-13814 | Siemens Simatic Wincc Runtime: HTTP Request/Response Splitting | 8.8 | |
| High | CVE-2018-13813 | Siemens Simatic Wincc Runtime: Open Redirect | 8.1 | |
| High | CVE-2019-6576 | Siemens SIMATIC: Cryptographic Issues | 6.5 | |
| High | CVE-2019-10935 | Siemens SIMATIC WinCC: Unrestricted Upload of File with Dangerous Type | 7.2 | |
| Medium | CVE-2017-6867 | Siemens SIMATIC WinCC: Out-of-bounds Write | 4.9 | |
| Not rated | CVE-2011-3321 | Siemens Simatic Wincc Flexible Runtime: Heap-Based Buffer Overflow | — | |
| Medium | CVE-2019-10929 | Siemens SIMATIC CP 1626: Use of a Broken or Risky Cryptographic Algorithm | 5.9 | |
| Medium | CVE-2019-6577 | Siemens SIMATIC: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | 5.4 | |
| Medium | CVE-2016-7165 | Siemens SIMATIC WinCC: security vulnerability | 6.4 | |
| Medium | CVE-2022-30694 | Siemens SIMATIC Drive Controller CPU 1504D TF: Cross-Site Request Forgery (CSRF) | 6.5 |