A vulnerability has been identified in SIMATIC NET PC Software V14 (All versions), SIMATIC NET PC Software V15 (All versions), SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All versions), SIMATIC WinCC (All versions < V8.0), SINAUT Software ST7sc (All versions). Before SIMATIC WinCC V8, legacy OPC services (OPC DA (Data Access), OPC HDA (Historical Data Access), and OPC AE (Alarms & Events)) were used per default. These
services were designed on top of the Windows ActiveX and DCOM mechanisms and do not implement state-of-the-art security mechanisms for authentication and encryption of contents.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
SIMATIC NET PC Software V14
Vendor
Siemens
Product
SIMATIC NET PC Software V14
Platforms
Unknown
Default status
unknown
SIMATIC NET PC Software V14 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions
affected
Unavailable
Unavailable
Unavailable
None listed
SIMATIC NET PC Software V15
Vendor
Siemens
Product
SIMATIC NET PC Software V15
Platforms
Unknown
Default status
unknown
SIMATIC NET PC Software V15 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions
affected
Unavailable
Unavailable
Unavailable
None listed
SIMATIC PCS 7 V8.2
Vendor
Siemens
Product
SIMATIC PCS 7 V8.2
Platforms
Unknown
Default status
unknown
SIMATIC PCS 7 V8.2 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions
affected
Unavailable
Unavailable
Unavailable
None listed
SIMATIC PCS 7 V9.0
Vendor
Siemens
Product
SIMATIC PCS 7 V9.0
Platforms
Unknown
Default status
unknown
SIMATIC PCS 7 V9.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions
affected
Unavailable
Unavailable
Unavailable
None listed
SIMATIC PCS 7 V9.1
Vendor
Siemens
Product
SIMATIC PCS 7 V9.1
Platforms
Unknown
Default status
unknown
SIMATIC PCS 7 V9.1 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions
affected
Unavailable
Unavailable
Unavailable
None listed
SIMATIC WinCC
Vendor
Siemens
Product
SIMATIC WinCC
Platforms
Unknown
Default status
unknown
SIMATIC WinCC · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V8.0
affected
Unavailable
Unavailable
Unavailable
None listed
SINAUT Software ST7sc
Vendor
Siemens
Product
SINAUT Software ST7sc
Platforms
Unknown
Default status
unknown
SINAUT Software ST7sc · Scoped product and version facts