5.9
Moyenne
CVE-2024-30321 A vulnerability has been identified in SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC WinCC Runtime…
Description
A vulnerability has been identified in SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC WinCC Runtime Professional V18 (All versions < V18 Update 5), SIMATIC WinCC Runtime Professional V19 (All versions < V19 Update 2), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 23), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 17), SIMATIC WinCC V8.0 (All versions < V8.0 Update 5). The affected products do not properly handle certain requests to their web application, which may lead to the leak of privileged information. This could allow an unauthenticated remote attacker to retrieve information such as users and passwords.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SIMATIC PCS 7 V9.1 | Versions non publiées | |
| SIMATIC WinCC Runtime Professional V18 | Versions non publiées | |
| SIMATIC WinCC Runtime Professional V19 | Versions non publiées | |
| SIMATIC WinCC V7.4 | Versions non publiées | |
| SIMATIC WinCC V7.5 | Versions non publiées | |
| SIMATIC WinCC V8.0 | Versions non publiées | |
| simatic_pcs_7 9.1 | 9.1 → < 10 | 10 |
| simatic_wincc 8.0 | 8.0 → dernières | Pas de correctif indiqué |
| simatic_wincc 7.5 | 7.5 → dernières | Pas de correctif indiqué |
Afficher les 3 autres branches Masquer les 3 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| simatic_wincc 7.4 | 7.4 → dernières | Pas de correctif indiqué |
| simatic_wincc_runtime_professional 19 | 19 → dernières | Pas de correctif indiqué |
| simatic_wincc_runtime_professional 18 | 18 → < 19 | 19 |
Références
- cert-portal.siemens.com cert-portal.siemens.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de SIMATIC PCS 7 V9.1
Les 16 CVE de SIMATIC PCS 7 V9.1 →
CVE-2025-30033
The affected setup component is vulnerable to DLL hijacking
7.8
Élevée
CVE-2024-35783
A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All…
9.1
Critique
CVE-2023-46280
A vulnerability has been identified in Security Configuration Tool (SCT) (All versions), SIMATIC Automation Tool (All…
6.5
Moyenne
CVE-2023-50821
A vulnerability has been identified in SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC04), SIMATIC WinCC Runtime…
6.2
Moyenne