Simatic Pcs 7

Vendor:

First CVE: Jul 22, 2010 · Active for 16 years

48

Total CVEs

More Total CVEs than 96% of tracked products

3.7

Avg CVEs / Year

Higher CVE frequency than 77% of tracked products

6.7

Avg CVSS

Higher Avg CVSS than 64% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Simatic Pcs 7 over time

Volume of CVEsAvg CVSS Base Score

First CVE

Jul 22, 2010

16 years ago

Most Recent CVE

Feb 13, 2024

896 days ago

CVE Severity & Scoring

Simatic Pcs 748 CVEs

54%

42%

All CVEs353,173 CVEs

45%

40%

11%

MediumHighCritical

Attack Vector

Local10 (20.8%)

Network14 (29.2%)

Unknown22 (45.8%)

Physical0 (0.0%)

Adjacent Network2 (4.2%)

Attack Complexity

Low25 (52.1%)

High1 (2.1%)

Unknown22 (45.8%)

User Interaction

None25 (52.1%)

Unknown22 (45.8%)

Required1 (2.1%)

Privileges Required

Low15 (31.3%)

High4 (8.3%)

None7 (14.6%)

Unknown22 (45.8%)

Top CVEs

Signals from CVEs in this product scope (48 CVEs).

48 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2014-8551HIGH The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before Update 2; SIMATIC PCS 7 7.1 through SP4, 8.0 through SP2, and 8.1; and TIA Portal 13	Nov 26, 2014	10.0	33	NO	NO
CVE-2019-10922CRITICAL A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 and newer (All versions), SIMATIC WinCC V7.2 and earlier (All versions), SI	May 14, 2019	9.8	31	NO	NO
CVE-2021-40358CRITICAL A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC04), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC W	Nov 9, 2021	9.9	30	NO	NO
CVE-2021-40360HIGH A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC WinCC V15 and ear	Feb 9, 2022	8.8	28	NO	NO
CVE-2023-25910HIGH A vulnerability has been identified in SIMATIC PCS 7 (All versions < V9.1 SP2 UC04), SIMATIC S7-PM (All versions < V5.7 SP1 HF1), SIMATIC S7-PM (All versions < V5.7 SP2 HF1), SIMAT	Jun 13, 2023	8.8	27	NO	NO
CVE-2019-10918HIGH A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1 with WinCC V7.3 Upd 19), SIMATIC PCS 7 V8.2 (All versi	May 14, 2019	8.8	27	NO	NO
CVE-2019-10916HIGH A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1 with WinCC V7.3 Upd 19), SIMATIC PCS 7 V8.2 (All versi	May 14, 2019	8.8	27	NO	NO
CVE-2017-12069HIGH An XXE vulnerability has been identified in OPC Foundation UA .NET Sample Code before 2017-03-21 and Local Discovery Server (LDS) before 1.03.367. Among the affected products are S	Aug 30, 2017	8.2	27	NO	NO
CVE-2021-40359HIGH A vulnerability has been identified in OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions < V9.0 Upd4), OpenPCS 7 V9.1 (All versions), SIMATIC BATCH V8.2 (All versions), S	Nov 9, 2021	7.7	25	NO	NO
CVE-2020-7585HIGH A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions < V9.2), SIMATIC STEP	Jun 10, 2020	7.8	25	NO	NO

View all 48 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (48 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

0 CVEs

0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (48 CVEs).

Media Mentions

Signals from CVEs in this product scope (48 CVEs).

Top CNAs Publishing CVEs For Simatic Pcs 7

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS
9.1	7	8.0	0.6%
9.0	10	8.0	1.2%
8.2	10	7.5	1.5%
8.1	10	7.2	2.0%
8.0	18	6.3	2.0%
7.1	15	6.3	2.2%
7.0	1	7.8	0.5%
6.1	1	7.8	0.5%
6.0	1	7.8	0.5%