CVE-2022-24287: Siemens SIMATIC Pcs 7

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC06), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1 UC01), SIMATIC WinCC Runtime Professional V16 and earlier (All versions), SIMATIC WinCC Runtime Professional V17 (All versions < V17 Upd4), SIMATIC WinCC V7.3 (All versions), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 21), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 8). A missing printer configuration on the host could allow an authenticated attacker to escape the WinCC Kiosk Mode.

Affected products

• Siemens SIMATIC Pcs 7: up to and including 9.0; version 9.1 only
• Siemens SIMATIC Wincc: up to and including 7.4; version 7.5 only
• Siemens SIMATIC Wincc Runtime Professional: up to and including 16; version 17 only

Published 2022-05-20. Last modified 2026-06-17.