VDB

SSA-363107

SSA-363107 PUBLISHED CVSS 7.800000190734863 HIGH

A missing printer configuration on the host could allow an authenticated attacker to escape the WinCC Kiosk Mode.

Risk Scores

CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

Affected Products

VendorProductVersions
SiemensSIMATIC PCS 7 V8.2
SiemensSIMATIC WinCC V7.4
SiemensSIMATIC PCS 7 V9.0
SiemensSIMATIC WinCC Runtime Professional V16 and earlier
SiemensSIMATIC PCS 7 V9.1
SiemensSIMATIC WinCC V7.3
SiemensSIMATIC WinCC V7.5
SiemensSIMATIC WinCC Runtime Professional V17

Timeline

  • May 10, 2022 CVE Published
  • Nov 14, 2023 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›