Skip to content
fr Sign in
6.2 Medium

CVE-2023-50821 A vulnerability has been identified in SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC04), SIMATIC WinCC Runtime…

Description

A vulnerability has been identified in SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC04), SIMATIC WinCC Runtime Professional V17 (All versions < V17 Update 8), SIMATIC WinCC Runtime Professional V18 (All versions < V18 Update 4), SIMATIC WinCC Runtime Professional V19 (All versions < V19 Update 1), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 16), SIMATIC WinCC V8.0 (All versions < V8.0 Update 5). The affected products do not properly validate the input provided in the login dialog box. An attacker could leverage this vulnerability to cause a persistent denial of service condition.

Affected products and versions

Product Affected versions Fixed in
SIMATIC PCS 7 V9.1 Versions not published
SIMATIC WinCC Runtime Professional V17 Versions not published
SIMATIC WinCC Runtime Professional V18 Versions not published
SIMATIC WinCC Runtime Professional V19 Versions not published
SIMATIC WinCC V7.5 Versions not published
SIMATIC WinCC V8.0 Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of SIMATIC PCS 7 V9.1

The 16 CVEs of SIMATIC PCS 7 V9.1 →
CVE-2025-30033 The affected setup component is vulnerable to DLL hijacking 7.8 High CVE-2024-35783 A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All… 9.1 Critical CVE-2024-30321 A vulnerability has been identified in SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC WinCC Runtime… 5.9 Medium CVE-2023-46280 A vulnerability has been identified in Security Configuration Tool (SCT) (All versions), SIMATIC Automation Tool (All… 6.5 Medium
Track this CVE