Vulnetix
Try Vulnetix Request Demo
SSA-629254 PUBLISHED CVSS 9.100000381469727 CRITICAL

The products listed below contain a remote code execution vulnerability that could allow an authenticated remote attacker to execute arbitrary code with high privileges. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, or not yet available.

Risk Scores

CVSS v3.1
9.100000381469727
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C

Affected Products

VendorProductVersions
SIMATIC PCS 7 V9.1
SIMATIC WinCC Runtime Professional V18
SIMATIC WinCC V7.4
SIMATIC Information Server 2020
SIMATIC WinCC Runtime Professional V19
SIMATIC WinCC V8.0
SIMATIC Process Historian 2020
SIMATIC Process Historian 2022
SIMATIC WinCC V7.5
SIMATIC Information Server 2022
SIMATIC BATCH V9.1

Timeline

References

Open in Interactive Console →