A vulnerability has been identified in SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC WinCC Runtime Professional V18 (All versions < V18 Update 5), SIMATIC WinCC Runtime Professional V19 (All versions < V19 Update 2), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 23), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 17), SIMATIC WinCC V8.0 (All versions < V8.0 Update 5). The affected products do not properly handle certain requests to their web application, which may lead to the leak of privileged information.
This could allow an unauthenticated remote attacker to retrieve information such as users and passwords.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
SIMATIC PCS 7 V9.1
Vendor
Siemens
Product
SIMATIC PCS 7 V9.1
Platforms
Unknown
Default status
unknown
SIMATIC PCS 7 V9.1 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V9.1 SP2 UC05
Unavailable
None listed
SIMATIC WinCC Runtime Professional V18
Vendor
Siemens
Product
SIMATIC WinCC Runtime Professional V18
Platforms
Unknown
Default status
unknown
SIMATIC WinCC Runtime Professional V18 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V18 Update 5
Unavailable
None listed
SIMATIC WinCC Runtime Professional V19
Vendor
Siemens
Product
SIMATIC WinCC Runtime Professional V19
Platforms
Unknown
Default status
unknown
SIMATIC WinCC Runtime Professional V19 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V19 Update 2
Unavailable
None listed
SIMATIC WinCC V7.4
Vendor
Siemens
Product
SIMATIC WinCC V7.4
Platforms
Unknown
Default status
unknown
SIMATIC WinCC V7.4 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V7.4 SP1 Update 23
Unavailable
None listed
SIMATIC WinCC V7.5
Vendor
Siemens
Product
SIMATIC WinCC V7.5
Platforms
Unknown
Default status
unknown
SIMATIC WinCC V7.5 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V7.5 SP2 Update 17
Unavailable
None listed
SIMATIC WinCC V8.0
Vendor
Siemens
Product
SIMATIC WinCC V8.0
Platforms
Unknown
Default status
unknown
SIMATIC WinCC V8.0 · Scoped product and version facts