Skip to content
fr Sign in
5.9 Medium

CVE-2024-30321 A vulnerability has been identified in SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC WinCC Runtime…

Description

A vulnerability has been identified in SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC WinCC Runtime Professional V18 (All versions < V18 Update 5), SIMATIC WinCC Runtime Professional V19 (All versions < V19 Update 2), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 23), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 17), SIMATIC WinCC V8.0 (All versions < V8.0 Update 5). The affected products do not properly handle certain requests to their web application, which may lead to the leak of privileged information. This could allow an unauthenticated remote attacker to retrieve information such as users and passwords.

Affected products and versions

Product Affected versions Fixed in
SIMATIC PCS 7 V9.1 Versions not published
SIMATIC WinCC Runtime Professional V18 Versions not published
SIMATIC WinCC Runtime Professional V19 Versions not published
SIMATIC WinCC V7.4 Versions not published
SIMATIC WinCC V7.5 Versions not published
SIMATIC WinCC V8.0 Versions not published
simatic_pcs_7 9.1 9.1 → < 10 10
simatic_wincc 8.0 8.0 → latest No fix stated
simatic_wincc 7.5 7.5 → latest No fix stated
Show the 3 other branches
Product Affected versions Fixed in
simatic_wincc 7.4 7.4 → latest No fix stated
simatic_wincc_runtime_professional 19 19 → latest No fix stated
simatic_wincc_runtime_professional 18 18 → < 19 19

References

Timeline

  1. Published
  2. Last modified

Other CVEs of SIMATIC PCS 7 V9.1

The 16 CVEs of SIMATIC PCS 7 V9.1 →
CVE-2025-30033 The affected setup component is vulnerable to DLL hijacking 7.8 High CVE-2024-35783 A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All… 9.1 Critical CVE-2023-46280 A vulnerability has been identified in Security Configuration Tool (SCT) (All versions), SIMATIC Automation Tool (All… 6.5 Medium CVE-2023-50821 A vulnerability has been identified in SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC04), SIMATIC WinCC Runtime… 6.2 Medium
Track this CVE