CVE-2016-5744: Siemens SIMATIC Wincc

High severity, CVSS 7.5. EPSS: 4.4% chance of exploitation in the next 30 days.

Siemens SIMATIC WinCC 7.0 through SP3 and 7.2 allows remote attackers to read arbitrary WinCC station files via crafted packets.

Affected products

• Siemens SIMATIC Wincc: version 7.0 only; version 7.2 only

Published 2016-07-22. Last modified 2026-06-17.