Product by Siemens
Simatic Wincc \(tia Portal\)
15 known vulnerabilities in Simatic Wincc \(tia Portal\) (Siemens), 0 of them actively exploited (CISA KEV).
Key figures
15
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2019-6572 | Siemens SIMATIC: Exposure of Sensitive Information to an Unauthorized Actor | 9.1 | |
| High | CVE-2018-13812 | Siemens Simatic Wincc Runtime: Path Traversal | 7.5 | |
| High | CVE-2019-10918 | Siemens SIMATIC WinCC: Exposed Dangerous Method or Function | 8.8 | |
| High | CVE-2018-13814 | Siemens Simatic Wincc Runtime: HTTP Request/Response Splitting | 8.8 | |
| High | CVE-2019-10916 | Siemens SIMATIC WinCC: SQL Injection | 8.8 | |
| High | CVE-2018-13813 | Siemens Simatic Wincc Runtime: Open Redirect | 8.1 | |
| High | CVE-2019-6576 | Siemens SIMATIC: Cryptographic Issues | 6.5 | |
| Medium | CVE-2017-6867 | Siemens SIMATIC WinCC: Out-of-bounds Write | 4.9 | |
| Medium | CVE-2019-10929 | Siemens SIMATIC CP 1626: Use of a Broken or Risky Cryptographic Algorithm | 5.9 | |
| High | CVE-2018-11454 | Siemens SIMATIC STEP 7 (TIA Portal): Incorrect Default Permissions | 8.6 | |
| Medium | CVE-2019-6577 | Siemens SIMATIC: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | 5.4 | |
| High | CVE-2018-11453 | Siemens SIMATIC STEP 7 (TIA Portal): Incorrect Default Permissions | 7.8 | |
| Medium | CVE-2017-6865 | Siemens Primary Setup Tool (PST): Denial of Service | 6.5 | |
| Medium | CVE-2016-7165 | Siemens SIMATIC WinCC: security vulnerability | 6.4 | |
| Medium | CVE-2019-10917 | Siemens SIMATIC WinCC: Uncaught Exception | 5.5 |