Siemens Wincc vulnerabilities

43 CVEs affecting Siemens Wincc, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-30897, published 2023-06-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-4875, published 2012-02-03. High severity, CVSS 9.3. EPSS: 13.8% chance of exploitation in the next 30 days. Stack-based buffer overflow in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels…
CVE-2011-4879, published 2012-02-03. High severity, CVSS 8.5. EPSS: 12.1% chance of exploitation in the next 30 days. miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels…
CVE-2011-4878, published 2012-02-03. High severity, CVSS 7.8. EPSS: 11.1% chance of exploitation in the next 30 days. Directory traversal vulnerability in miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP,…
CVE-2011-4876, published 2012-02-03. High severity, CVSS 9.3. EPSS: 9% chance of exploitation in the next 30 days. Directory traversal vulnerability in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels…
CVE-2011-4877, published 2012-02-03. High severity, CVSS 7.1. EPSS: 7.3% chance of exploitation in the next 30 days. HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime…
CVE-2011-4513, published 2012-02-03. High severity, CVSS 10.0. EPSS: 4.8% chance of exploitation in the next 30 days. Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible…
CVE-2011-4514, published 2012-02-03. High severity, CVSS 10.0. EPSS: 3.4% chance of exploitation in the next 30 days. The TELNET daemon in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced;…
CVE-2013-0674, published 2013-03-21. Medium severity, CVSS 6.8. EPSS: 3.4% chance of exploitation in the next 30 days. Buffer overflow in the RegReader ActiveX control in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote attackers to execute arbitrary code via a long…
CVE-2011-4508, published 2012-02-03. High severity, CVSS 9.3. EPSS: 3% chance of exploitation in the next 30 days. The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI…
CVE-2017-12069, published 2017-08-30. High severity, CVSS 8.2. EPSS: 2.9% chance of exploitation in the next 30 days. An XXE vulnerability has been identified in OPC Foundation UA .NET Sample Code before 2017-03-21 and Local Discovery Server (LDS) before 1.03.367. Among the affected products are Siemens SIMATIC PCS7…

Latest

CVE-2023-30897, published 2023-06-13. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC WinCC (All versions < V7.5.2.13). Affected applications fail to set proper access rights for their installation folder if a non-default installation…
CVE-2015-2823, published 2015-04-08. Medium severity, CVSS 6.8. EPSS: 2.1% chance of exploitation in the next 30 days. Siemens SIMATIC HMI Basic Panels 2nd Generation before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC HMI Comfort Panels before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC WinCC Runtime Advanced before WinCC…
CVE-2015-2822, published 2015-04-08. Medium severity, CVSS 4.3. EPSS: 1.7% chance of exploitation in the next 30 days. Siemens SIMATIC HMI Comfort Panels before WinCC (TIA Portal) 13 SP1 Upd2 and SIMATIC WinCC Runtime Advanced before WinCC (TIA Portal) 13 SP1 Upd2 allow man-in-the-middle attackers to cause a denial…
CVE-2015-1358, published 2015-02-18. Medium severity, CVSS 5.0. EPSS: 2.7% chance of exploitation in the next 30 days. The remote-management module in the (1) Multi Panels, (2) Comfort Panels, and (3) RT Advanced functionality in Siemens SIMATIC WinCC (TIA Portal) before 13 SP1 and in the (4) panels and (5) runtime…
CVE-2014-4686, published 2014-07-24. Medium severity, CVSS 6.8. EPSS: 1.1% chance of exploitation in the next 30 days. The Project administration application in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, has a hardcoded encryption key, which allows remote attackers to obtain sensitive…
CVE-2014-4685, published 2014-07-24. Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days. Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows local users to gain privileges by leveraging weak system-object access control.
CVE-2014-4684, published 2014-07-24. Medium severity, CVSS 6.0. EPSS: 1.3% chance of exploitation in the next 30 days. The database server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a request to TCP port 1433.
CVE-2014-4683, published 2014-07-24. Medium severity, CVSS 4.9. EPSS: 1.2% chance of exploitation in the next 30 days. The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a (1) HTTP or (2) HTTPS request.
CVE-2014-4682, published 2014-07-24. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote attackers to obtain sensitive information via an HTTP request.