Skip to content
Sign in
7.8 High

CVE-2023-30897 A vulnerability has been identified in SIMATIC WinCC (All versions < V7.5.2.13)

Description

A vulnerability has been identified in SIMATIC WinCC (All versions < V7.5.2.13). Affected applications fail to set proper access rights for their installation folder if a non-default installation path was chosen during installation. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges.

Affected products and versions

Product Affected versions Fixed in
SIMATIC WinCC Versions not published

Other CVEs of SIMATIC WinCC

The 3 CVEs of SIMATIC WinCC →
CVE-2023-28829 A vulnerability has been identified in SIMATIC NET PC Software V14 (All versions), SIMATIC NET PC Software V15 (All… 3.9 Low CVE-2020-10048 A vulnerability has been identified in SIMATIC PCS 7 (All versions), SIMATIC WinCC (All versions < V7.5 SP2) Not rated
Track this CVE