Simatic Pcs7

Vendor:

First CVE: Jul 22, 2010 · Active for 16 years

48

Total CVEs

More Total CVEs than 96% of tracked products

3.7

Avg CVEs / Year

Higher CVE frequency than 89% of tracked products

6.7

Avg CVSS

Higher Avg CVSS than 21% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Simatic Pcs7 over time

Volume of CVEsAvg CVSS Base Score

First CVE

Jul 22, 2010

16 years ago

Most Recent CVE

Feb 13, 2024

896 days ago

CVE Severity & Scoring

Simatic Pcs748 CVEs

54%

42%

All CVEs353,173 CVEs

45%

40%

11%

MediumHighCritical

Attack Vector

Local10 (20.8%)

Network14 (29.2%)

Unknown22 (45.8%)

Physical0 (0.0%)

Adjacent Network2 (4.2%)

Attack Complexity

Low25 (52.1%)

High1 (2.1%)

Unknown22 (45.8%)

User Interaction

None25 (52.1%)

Unknown22 (45.8%)

Required1 (2.1%)

Privileges Required

Low15 (31.3%)

High4 (8.3%)

None7 (14.6%)

Unknown22 (45.8%)

Top CVEs

Signals from CVEs in this product scope (48 CVEs).

48 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2014-8551HIGH The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before Update 2; SIMATIC PCS 7 7.1 through SP4, 8.0 through SP2, and 8.1; and TIA Portal 13	Nov 26, 2014	10.0	33	NO	NO
CVE-2019-10922CRITICAL A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 and newer (All versions), SIMATIC WinCC V7.2 and earlier (All versions), SI	May 14, 2019	9.8	31	NO	NO
CVE-2021-40358CRITICAL A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC04), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC W	Nov 9, 2021	9.9	30	NO	NO
CVE-2021-40360HIGH A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC WinCC V15 and ear	Feb 9, 2022	8.8	28	NO	NO
CVE-2023-25910HIGH A vulnerability has been identified in SIMATIC PCS 7 (All versions < V9.1 SP2 UC04), SIMATIC S7-PM (All versions < V5.7 SP1 HF1), SIMATIC S7-PM (All versions < V5.7 SP2 HF1), SIMAT	Jun 13, 2023	8.8	27	NO	NO
CVE-2019-10918HIGH A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1 with WinCC V7.3 Upd 19), SIMATIC PCS 7 V8.2 (All versi	May 14, 2019	8.8	27	NO	NO
CVE-2019-10916HIGH A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1 with WinCC V7.3 Upd 19), SIMATIC PCS 7 V8.2 (All versi	May 14, 2019	8.8	27	NO	NO
CVE-2017-12069HIGH An XXE vulnerability has been identified in OPC Foundation UA .NET Sample Code before 2017-03-21 and Local Discovery Server (LDS) before 1.03.367. Among the affected products are S	Aug 30, 2017	8.2	27	NO	NO
CVE-2021-40359HIGH A vulnerability has been identified in OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions < V9.0 Upd4), OpenPCS 7 V9.1 (All versions), SIMATIC BATCH V8.2 (All versions), S	Nov 9, 2021	7.7	25	NO	NO
CVE-2020-7585HIGH A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions < V9.2), SIMATIC STEP	Jun 10, 2020	7.8	25	NO	NO

View all 48 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (48 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

0 CVEs

0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (48 CVEs).

Media Mentions

Signals from CVEs in this product scope (48 CVEs).

Top CNAs Publishing CVEs For Simatic Pcs7

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS
9.1	7	8.0	0.6%
9.0	10	8.0	1.2%
8.2	10	7.5	1.5%
8.1	10	7.2	2.0%
8.0	18	6.3	2.0%
7.1	15	6.3	2.2%
7.0	1	7.8	0.5%
6.1	1	7.8	0.5%
6.0	1	7.8	0.5%