Simatic Step 7
Vendor:
First CVE: Jul 26, 2012 · Active for 13 years
21
Total CVEs
More Total CVEs than 94% of tracked products
2.6
Avg CVEs / Year
Higher CVE frequency than 75% of tracked products
6.2
Avg CVSS
Higher Avg CVSS than 24% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Simatic Step 7 over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jul 26, 2012
13 years ago
Most Recent CVE
Dec 12, 2023
957 days ago
CVE Severity & Scoring
Simatic Step 721 CVEs
14%
52%
33%
All CVEs352,719 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local11 (52.4%)
Network4 (19.0%)
Unknown6 (28.6%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low11 (52.4%)
High4 (19.0%)
Unknown6 (28.6%)
User Interaction
None15 (71.4%)
Unknown6 (28.6%)
Required0 (0.0%)
Privileges Required
Low9 (42.9%)
High3 (14.3%)
None3 (14.3%)
Unknown6 (28.6%)
Top CVEs
Signals from CVEs in this product scope (21 CVEs).
21 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-25910HIGH A vulnerability has been identified in SIMATIC PCS 7 (All versions < V9.1 SP2 UC04), SIMATIC S7-PM (All versions < V5.7 SP1 HF1), SIMATIC S7-PM (All versions < V5.7 SP2 HF1), SIMAT | Jun 13, 2023 | 8.8 | 27 | NO | NO |
CVE-2020-7587HIGH A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versi | Jul 14, 2020 | 8.2 | 27 | NO | NO |
CVE-2021-31894HIGH A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.X (All versions < V9.1 SP2), SIMATIC PDM (All versions < V9.2 SP2), SIMATIC S | Jul 13, 2021 | 8.8 | 26 | NO | NO |
CVE-2021-42029HIGH A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) V15 (All versions), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 5), SIMATIC STEP 7 (TIA Portal) V1 | Apr 12, 2022 | 7.8 | 25 | NO | NO |
CVE-2020-7585HIGH A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions < V9.2), SIMATIC STEP | Jun 10, 2020 | 7.8 | 25 | NO | NO |
CVE-2021-31893HIGH A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions < V9.2), SIMATIC STEP | Jul 13, 2021 | 7.8 | 23 | NO | NO |
CVE-2020-7581MEDIUM A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versi | Jul 14, 2020 | 6.7 | 23 | NO | NO |
CVE-2020-7580MEDIUM A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 | Jun 10, 2020 | 6.7 | 23 | NO | NO |
CVE-2016-7165MEDIUM A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC IT Production Suite (All versions < V7.0 SP1 HFX 2), SIMATIC NET PC-Software (All | Nov 15, 2016 | 6.4 | 23 | NO | NO |
CVE-2012-3015MEDIUM Untrusted search path vulnerability in Siemens SIMATIC STEP7 before 5.5 SP1, as used in SIMATIC PCS7 7.1 SP3 and earlier and other products, allows local users to gain privileges v | Jul 26, 2012 | 6.9 | 22 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (21 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (21 CVEs).
Media Mentions
Signals from CVEs in this product scope (21 CVEs).
Top CNAs Publishing CVEs For Simatic Step 7
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 5.6 | 3 | 7.4 | 0.4% | 0 | 0 |
| 5.5 | 1 | 6.9 | 0.4% | 0 | 0 |
| 17 | 1 | 7.8 | 0.2% | 0 | 0 |
| 16 | 4 | 7.2 | 1.0% | 0 | 0 |
| 15.1 | 1 | 8.2 | 2.5% | 0 | 0 |
| 13.0 | 1 | 2.1 | 0.4% | 0 | 0 |
| 13 | 1 | 6.8 | 1.4% | 0 | 0 |
| 12.0 | 1 | 2.1 | 0.4% | 0 | 0 |
| 12 | 1 | 6.8 | 1.4% | 0 | 0 |