CVE-2013-0678: Siemens SIMATIC PCS7

Medium severity, CVSS 4.0. EPSS: 1.5% chance of exploitation in the next 30 days.

Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, does not properly represent WebNavigator credentials in a database, which makes it easier for remote authenticated users to obtain sensitive information via a SQL query.

Affected products

• Siemens SIMATIC PCS7: up to and including 8.0
• Siemens Wincc: up to and including 7.0; version 7.0 only

Published 2013-03-21. Last modified 2026-06-16.