Product by Siemens
Simatic Wincc V17
11 known vulnerabilities in Simatic Wincc V17 (Siemens), 0 of them actively exploited (CISA KEV).
Key figures
11
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-40358 | Siemens SIMATIC WinCC V16: Path Traversal | 9.9 | |
| High | CVE-2021-40359 | Siemens SIMATIC: Path Traversal | 7.7 | |
| High | CVE-2021-40360 | Siemens SIMATIC WinCC V16: Exposure of Sensitive Information to an Unauthorized Actor | 8.8 | |
| High | CVE-2024-54678 | Siemens SIMATIC S7-PLCSIM V17: Deserialization of Untrusted Data | 8.2 | |
| High | CVE-2025-40759 | Siemens SIMATIC S7-PLCSIM V17: Deserialization of Untrusted Data | 7.8 | |
| High | CVE-2024-49849 | Siemens SIMATIC S7-PLCSIM V16: Deserialization of Untrusted Data | 7.8 | |
| High | CVE-2023-32736 | Siemens SIMATIC S7-PLCSIM V16: Deserialization of Untrusted Data | 7.3 | |
| High | CVE-2024-52051 | Siemens SIMATIC S7-PLCSIM V17: Improper Input Validation | 7.3 | |
| High | CVE-2023-32735 | Siemens SIMATIC STEP 7 Safety V16: Deserialization of Untrusted Data | 6.5 | |
| High | CVE-2021-40363 | Siemens SIMATIC WinCC V16: Insertion of Sensitive Information into Externally-Accessible File or Directory | 7.8 | |
| Medium | CVE-2021-40364 | Siemens SIMATIC WinCC V16: Insertion of Sensitive Information into Log File | 5.5 |
News
- SSA-800126 V1.0: Deserialization Vulnerability in Siemens Engineering Platforms before V20siemens-productcert
- SSA-392859 V1.0: Local Arbitrary Code Execution Vulnerability in Siemens Engineering Platforms before V20siemens-productcert
- SSA-840188 V1.0: Multiple Vulnerabilities in SIMATIC WinCC Affecting Other SIMATIC Software Productssiemens-productcert
- SSA-840188 V1.6 (Last Update: 2023-04-11): Multiple Vulnerabilities in SIMATIC WinCC Affecting Other SIMATIC Software Productssiemens-productcert