Vulnerabilities of Siemens SIMATIC WinCC Runtime Advanced

Is your version affected?

CVE	Summary	Score	Published
CVE-2025-30033	The affected setup component is vulnerable to DLL hijacking	7.8 High	Aug 12, 2025
CVE-2023-30756	A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl	5.9 Medium	Sep 10, 2024
CVE-2023-30755	A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl	4.4 Medium	Sep 10, 2024
CVE-2023-28827	A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl	5.9 Medium	Sep 10, 2024
CVE-2023-46280	A vulnerability has been identified in Security Configuration Tool (SCT) (All versions), SIMATIC Automation Tool (All…	6.5 Medium	May 14, 2024
CVE-2022-30694	The login endpoint /FormLogin in affected web services does not apply proper origin checking	6.5 Medium	Nov 8, 2022
CVE-2020-7580	A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All…	Not rated	Jun 10, 2020
CVE-2019-10929	A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC…	Not rated	Aug 13, 2019
CVE-2019-6568	The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition	7.5 High	Apr 17, 2019
CVE-2019-6575	A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP Open Controller CPU…	7.5 High	Apr 17, 2019