Siemens SIMATIC Wincc Unified Pc Runtime v18 vulnerabilities

2 CVEs affecting Siemens SIMATIC Wincc Unified Pc Runtime v18, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-30033, published 2025-08-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-30033, published 2025-08-12. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup…
CVE-2024-52051, published 2024-12-10. High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC S7-PLCSIM V17 (All versions), SIMATIC S7-PLCSIM V18 (All versions), SIMATIC STEP 7 Safety V17 (All versions < V17 Update 9), SIMATIC STEP 7 Safety V18…