Siemens SIMATIC Wincc Unified vulnerabilities

2 CVEs affecting Siemens SIMATIC Wincc Unified, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-32736, published 2024-11-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-32736, published 2024-11-12. High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC S7-PLCSIM V16 (All versions), SIMATIC S7-PLCSIM V17 (All versions), SIMATIC STEP 7 Safety V16 (All versions), SIMATIC STEP 7 Safety V17 (All versions <…
CVE-2023-32735, published 2024-07-09. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC STEP 7 Safety V16 (All versions < V16 Update 7), SIMATIC STEP 7 Safety V17 (All versions < V17 Update 7), SIMATIC STEP 7 Safety V18 (All versions < V18…