Siemens Desigo Cc vulnerabilities

4 CVEs affecting Siemens Desigo Cc, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-23815, published 2025-05-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-31891, published 2021-09-14. Critical severity, CVSS 10.0. EPSS: 3.8% chance of exploitation in the next 30 days. A vulnerability has been identified in Desigo CC (All versions with OIS Extension Module), GMA-Manager (All versions with OIS running on Debian 9 or earlier), Operation Scheduler (All versions with…
CVE-2021-37181, published 2021-09-14. Critical severity, CVSS 10.0. EPSS: 1.9% chance of exploitation in the next 30 days. A vulnerability has been identified in Cerberus DMS V4.0 (All versions), Cerberus DMS V4.1 (All versions), Cerberus DMS V4.2 (All versions), Cerberus DMS V5.0 (All versions < v5.0 QU1), Desigo CC…
CVE-2022-33139, published 2022-06-21. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability has been identified in Cerberus DMS (All versions), Desigo CC (All versions), Desigo CC Compact (All versions), SIMATIC WinCC OA V3.16 (All versions in default configuration), SIMATIC…
CVE-2024-23815, published 2025-05-13. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been identified in Desigo CC (All versions if access from Installed Clients to Desigo CC server is allowed from networks outside of a highly protected zone), Desigo CC (All…