VDB

CNVD-2024-32687

CNVD-2024-32687 PUBLISHED

Siemens SIMATIC PCS 7是德国西门子(Siemens)公司的一套过程控制系统。SIMATIC WinCC是一套自动化的数据采集与监控(SCADA)系统。SIMATIC WinCC Runtime Professional是用于操作员的可视化运行时平台机器和设备的控制和监控。 Siemens SIMATIC WinCC存在信息泄露漏洞,攻击者可利用该漏洞检索用户和密码等信息。

Affected Products

VendorProductVersions
Siemens SIMATIC WinCC V8.0 < V8.0 Update 5
Siemens SIMATIC WinCC V7.4 < V7.4 SP1 Update 23
Siemens SIMATIC WinCC Runtime Professional V18
Siemens SIMATIC PCS 7 V9.1
Siemens SIMATIC WinCC V7.5 < V7.5 SP2 Update 17
Siemens SIMATIC WinCC Runtime Professional V19 < V19 Update 2

Timeline

  • Jul 10, 2024 CVE ID Reserved
  • Jul 19, 2024 CVE Published
Open in Interactive Console →
$ Console Community · 100/wk Open console ›