Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Simatic_step_7
(Siemens)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 19 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2020-06-10 | CVE-2020-7580 | A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions), SIMATIC NET PC Software V16 (All versions < V16 Upd3), SIMATIC PCS neo (All versions < V3.0 SP1), SIMATIC ProSave (All versions < V17), SIMATIC S7-1500 Software Controller (All versions < V21.8), SIMATIC STEP 7 (TIA Portal) V13 (All versions < V13 SP2 Update 4), SIMATIC STEP 7 (TIA Portal) V14 (All... | Simatic_automatic_tool, Simatic_net_pc, Simatic_pcs_7, Simatic_pcs_neo, Simatic_prosave, Simatic_s7\-1500_software_controller, Simatic_step_7, Simatic_wincc, Simatic_wincc_open_architecture, Simatic_wincc_runtime_advanced, Simatic_wincc_runtime_professional, Sinamics_startdrive, Sinamics_starter_commissioning_tool, Sinec_network_management_system, Sinema_server, Sinumerik_one_virtual, Sinumerik_operate | 6.7 | ||
| 2020-06-10 | CVE-2020-7585 | A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions < V9.2), SIMATIC STEP 7 V5.X (All versions < V5.6 SP2 HF3), SINAMICS STARTER (containing STEP 7 OEM version) (All versions < V5.4 HF2). A DLL Hijacking vulnerability could allow a local attacker to execute code with elevated privileges. The security vulnerability could be exploited by an attacker with local access to the affected... | Simatic_pcs_7, Simatic_process_device_manager, Simatic_step_7, Sinamics_starter | 7.8 | ||
| 2020-06-10 | CVE-2020-7586 | A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions < V9.2), SIMATIC STEP 7 V5.X (All versions < V5.6 SP2 HF3), SINAMICS STARTER (containing STEP 7 OEM version) (All versions < V5.4 HF2). A buffer overflow vulnerability could allow a local attacker to cause a Denial-of-Service situation. The security vulnerability could be exploited by an attacker with local access to the affected... | Simatic_pcs_7, Simatic_process_device_manager, Simatic_step_7, Sinamics_starter | 7.8 | ||
| 2020-07-14 | CVE-2020-7581 | A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All versions < V3.3), Opcenter Quality (All versions < V11.3), Opcenter RD&L (V8.0), SIMATIC Notifier Server for Windows (All versions), SIMATIC PCS neo (All versions < V3.0 SP1), SIMATIC STEP 7 (TIA Portal) V15 (All versions < V15.1 Update 5), SIMATIC STEP 7 (TIA Portal) V16... | Opcenter_execution_discrete, Opcenter_execution_foundation, Opcenter_execution_process, Opcenter_intelligence, Opcenter_quality, Opcenter_rd\&l, Simatic_notifier_server, Simatic_pcs_neo, Simatic_step_7, Simocode_es, Soft_starter_es | 6.7 | ||
| 2020-07-14 | CVE-2020-7587 | A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All versions < V3.3), Opcenter Quality (All versions < V11.3), Opcenter RD&L (V8.0), SIMATIC IT LMS (All versions < V2.6), SIMATIC IT Production Suite (All versions < V8.0), SIMATIC Notifier Server for Windows (All versions), SIMATIC PCS neo (All versions < V3.0 SP1), SIMATIC... | Opcenter_execution_discrete, Opcenter_execution_foundation, Opcenter_execution_process, Opcenter_intelligence, Opcenter_quality, Opcenter_rd\&l, Simatic_it_lms, Simatic_it_production_suite, Simatic_notifier_server, Simatic_pcs_neo, Simatic_step_7, Simocode_es, Soft_starter_es | 8.2 | ||
| 2020-07-14 | CVE-2020-7588 | A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All versions < V3.3), Opcenter Quality (All versions < V11.3), Opcenter RD&L (V8.0), SIMATIC IT LMS (All versions < V2.6), SIMATIC IT Production Suite (All versions < V8.0), SIMATIC Notifier Server for Windows (All versions), SIMATIC PCS neo (All versions < V3.0 SP1), SIMATIC... | Opcenter_execution_discrete, Opcenter_execution_foundation, Opcenter_execution_process, Opcenter_intelligence, Opcenter_quality, Opcenter_rd\&l, Simatic_it_lms, Simatic_it_production_suite, Simatic_notifier_server, Simatic_pcs_neo, Simatic_step_7, Simocode_es, Soft_starter_es | 5.3 | ||
| 2022-04-12 | CVE-2021-42029 | A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) V15 (All versions), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 5), SIMATIC STEP 7 (TIA Portal) V17 (All versions < V17 Update 2). An attacker could achieve privilege escalation on the web server of certain devices due to improper access control vulnerability in the engineering system software. The attacker needs to have direct access to the impacted web server. | Simatic_step_7 | 7.8 | ||
| 2023-06-13 | CVE-2023-25910 | A vulnerability has been identified in SIMATIC PCS 7 (All versions < V9.1 SP2 UC04), SIMATIC S7-PM (All versions < V5.7 SP1 HF1), SIMATIC S7-PM (All versions < V5.7 SP2 HF1), SIMATIC STEP 7 V5 (All versions < V5.7). The affected product contains a database management system that could allow remote users with low privileges to use embedded functions of the database (local or in a network share) that have impact on the server. An attacker with network access to the server network could... | Simatic_pcs_7, Simatic_s7\-Pm, Simatic_step_7 | 8.8 | ||
| 2023-12-12 | CVE-2022-46141 | A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All versions < V19). An information disclosure vulnerability could allow a local attacker to gain access to the access level password of the SIMATIC S7-1200 and S7-1500 CPUs, when entered by a legitimate user in the hardware configuration of the affected application. | Simatic_step_7 | 5.5 | ||
| 2019-08-13 | CVE-2019-10929 | A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V20.8), SIMATIC HMI Panel (incl. SIPLUS variants) (All versions), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.4.0),... | Simatic_cp_1626_firmware, Simatic_et_200sp_open_controller_cpu_1515sp_pc2_firmware, Simatic_et_200sp_open_controller_cpu_1515sp_pc_firmware, Simatic_hmi_panel_firmware, Simatic_net_pc, Simatic_s7\-1200_cpu_1211c_firmware, Simatic_s7\-1200_cpu_1212c_firmware, Simatic_s7\-1200_cpu_1214c_firmware, Simatic_s7\-1200_cpu_1215c_firmware, Simatic_s7\-1200_cpu_1217c_firmware, Simatic_s7\-1500, Simatic_s7\-1500_cpu_1511c_firmware, Simatic_s7\-1500_cpu_1512c_firmware, Simatic_s7\-1500_cpu_1518_firmware, Simatic_s7\-Plcsim_advanced, Simatic_step_7, Simatic_tim_1531_irc_firmware, Simatic_wincc, Simatic_wincc_open_architecture, Simatic_wincc_runtime | 5.9 |