Siemens SIMATIC Tiaportal vulnerabilities

2 CVEs affecting Siemens SIMATIC Tiaportal, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-8552, published 2014-11-26.

More from Siemens.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-8551, published 2014-11-26. High severity, CVSS 10.0. EPSS: 5.3% chance of exploitation in the next 30 days. The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before Update 2; SIMATIC PCS 7 7.1 through SP4, 8.0 through SP2, and 8.1; and TIA Portal 13 before Update 6…
• CVE-2014-8552, published 2014-11-26. Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days. The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before Update 2; SIMATIC PCS 7 7.1 through SP4, 8.0 through SP2, and 8.1; and TIA Portal 13 before Update 6…