A vulnerability in SIEMENS SIMATIC WinCC (All versions < SIMATIC WinCC V7.2) and SIEMENS SIMATIC PCS 7 (All versions < SIMATIC PCS 7 V8.0 SP1) could allow a remote attacker to crash an ActiveX component or leak parts of the application memory if a user is tricked into clicking on a malicious link under certain conditions.
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:HSiemens Simatic Pcs 7
APPSiemens≤ 8.0Siemens Simatic Wincc
APPSiemens≤ 7.1
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
References
Related vulnerabilities
CVE-2023-25910CRITICAL10.0PL ✓same product
Siemens SIMATIC — RCE przez wbudowane funkcje systemu zarządzania bazą danych
CVE-2021-40358CRITICAL9.9PL ✓same product
Path Traversal w SIMATIC PCS 7 i WinCC — nieautoryzowany dostęp do plików
CVE-2019-10922CRITICAL9.8PL ✓same product
RCE bez uwierzytelnienia w Siemens SIMATIC PCS 7 i WinCC
CVE-2016-5743CRITICAL9.8PL ✓same product
RCE w Siemens SIMATIC WinCC i PCS 7 poprzez spreparowane pakiety sieciowe
CVE-2023-48363HIGH7.1same product
A vulnerability has been identified in OpenPCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC BATCH V9.1 (All ...