Product by Siemens
Siemens SIMATIC WinCC Runtime Advanced
22 known vulnerabilities in Siemens SIMATIC WinCC Runtime Advanced (Siemens), 0 of them actively exploited (CISA KEV).
Key figures
22
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2021-3449 | NULL pointer deref in signature_algorithms processing | 5.9 | |
| Critical | CVE-2021-27384 | Siemens SIMATIC WinCC Runtime Advanced V15: Access of Memory Location After End of Buffer | 9.8 | |
| Critical | CVE-2019-6572 | Siemens SIMATIC: Exposure of Sensitive Information to an Unauthorized Actor | 9.1 | |
| High | CVE-2021-27385 | Siemens SIMATIC WinCC Runtime Advanced V15: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2021-27386 | Siemens SIMATIC WinCC Runtime Advanced V15: Missing Release of Memory after Effective Lifetime | 7.5 | |
| High | CVE-2021-27383 | Siemens SIMATIC WinCC Runtime Advanced V15: Allocation of Resources Without Limits or Throttling | 7.5 | |
| High | CVE-2019-6575 | Siemens SIMATIC CP 443-1 OPC UA: Uncaught Exception | 7.5 | |
| High | CVE-2021-25662 | Siemens SIMATIC WinCC Runtime Advanced V15: Improper Handling of Exceptional Conditions | 7.5 | |
| High | CVE-2019-6576 | Siemens SIMATIC: Cryptographic Issues | 6.5 | |
| High | CVE-2019-6568 | Siemens SIMATIC CP 1604: Out-of-bounds Read | 7.5 | |
| High | CVE-2021-25661 | Siemens SIMATIC WinCC Runtime Advanced V15: Access of Memory Location After End of Buffer | 7.5 | |
| High | CVE-2021-25660 | Siemens SIMATIC WinCC Runtime Advanced V15: Access of Memory Location After End of Buffer | 7.5 | |
| Medium | CVE-2019-10929 | Siemens SIMATIC CP 1626: Use of a Broken or Risky Cryptographic Algorithm | 5.9 | |
| High | CVE-2023-30756 | Siemens SIMATIC CP 1242-7 V2 (incl. SIPLUS variants): NULL Pointer Dereference | 5.9 | |
| High | CVE-2023-28827 | Siemens SIMATIC CP 1242-7 V2 (incl. SIPLUS variants): NULL Pointer Dereference | 5.9 | |
| Medium | CVE-2019-6577 | Siemens SIMATIC: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | 5.4 | |
| High | CVE-2025-30033 | Siemens CP PtP Param configuring interface: Uncontrolled Search Path Element | 7.8 | |
| High | CVE-2023-46280 | Siemens Security Configuration Tool (SCT): Out-of-bounds Read | 6.5 | |
| Medium | CVE-2023-30755 | Siemens SIMATIC CP 1242-7 V2 (incl. SIPLUS variants): NULL Pointer Dereference | 4.4 | |
| Medium | CVE-2020-7580 | Siemens SIMATIC Automation Tool: Unquoted Search Path or Element | 6.7 | |
| Medium | CVE-2022-30694 | Siemens SIMATIC Drive Controller CPU 1504D TF: Cross-Site Request Forgery (CSRF) | 6.5 | |
| Medium | CVE-2020-7592 | Siemens SIMATIC: Cleartext Transmission of Sensitive Information | 6.5 |