Product by Siemens
Siemens SIMATIC WinCC Runtime Professional
13 known vulnerabilities in Siemens SIMATIC WinCC Runtime Professional (Siemens), 0 of them actively exploited (CISA KEV).
Key figures
13
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2019-6572 | Siemens SIMATIC: Exposure of Sensitive Information to an Unauthorized Actor | 9.1 | |
| High | CVE-2019-10918 | Siemens SIMATIC WinCC: Exposed Dangerous Method or Function | 8.8 | |
| High | CVE-2018-4832 | Siemens SIMATIC NET PC Software V14: Improper Input Validation | 7.5 | |
| High | CVE-2019-10916 | Siemens SIMATIC WinCC: SQL Injection | 8.8 | |
| High | CVE-2019-6576 | Siemens SIMATIC: Cryptographic Issues | 6.5 | |
| Medium | CVE-2019-10929 | Siemens SIMATIC CP 1626: Use of a Broken or Risky Cryptographic Algorithm | 5.9 | |
| Medium | CVE-2019-6577 | Siemens SIMATIC: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | 5.4 | |
| High | CVE-2025-30033 | Siemens CP PtP Param configuring interface: Uncontrolled Search Path Element | 7.8 | |
| Medium | CVE-2020-7580 | Siemens SIMATIC Automation Tool: Unquoted Search Path or Element | 6.7 | |
| High | CVE-2023-48364 | Siemens SIMATIC WinCC Runtime Professional V18: NULL Pointer Dereference | 6.5 | |
| High | CVE-2023-48363 | Siemens SIMATIC WinCC Runtime Professional V18: NULL Pointer Dereference | 6.5 | |
| High | CVE-2022-24287 | Siemens SIMATIC WinCC Runtime Professional V17: Initialization of a Resource with an Insecure Default | 7.8 | |
| Medium | CVE-2019-10917 | Siemens SIMATIC WinCC: Uncaught Exception | 5.5 |