Siemens SIMATIC Wincc Runtime Professional v17 vulnerabilities

2 CVEs affecting Siemens SIMATIC Wincc Runtime Professional v17, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-46280, published 2024-05-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-46280, published 2024-05-14. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability has been identified in Security Configuration Tool (SCT) (All versions), SIMATIC Automation Tool (All versions < V5.0 SP2), SIMATIC BATCH V9.1 (All versions < V9.1 SP2 Upd5), SIMATIC…
CVE-2023-50821, published 2024-04-09. Medium severity, CVSS 6.2. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC04), SIMATIC WinCC Runtime Professional V17 (All versions < V17 Update 8), SIMATIC WinCC Runtime Professional V18…