CVE-2020-10048: Siemens SIMATIC Pcs 7

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability has been identified in SIMATIC PCS 7 (All versions), SIMATIC WinCC (All versions < V7.5 SP2). Due to an insecure password verification process, an attacker could bypass the password protection set on protected files, thus being granted access to the protected content, circumventing authentication.

Affected products

• Siemens SIMATIC Pcs 7: any version
• Siemens SIMATIC Wincc: before 7.5 (fixed in 7.5); version 7.5 only

Published 2021-02-09. Last modified 2026-06-17.