Wincc

Vendor:

First CVE: Feb 3, 2012 · Active for 14 years

43
Total CVEs
More Total CVEs than 98% of tracked products
7.2
Avg CVEs / Year
Higher CVE frequency than 94% of tracked products
6.2
Avg CVSS
Higher Avg CVSS than 29% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Wincc over time

Volume of CVEsAvg CVSS Base Score
First CVE
Feb 3, 2012
14 years ago
Most Recent CVE
Jun 13, 2023
1,141 days ago

CVE Severity & Scoring

Wincc43 CVEs
All CVEs353,240 CVEs
MediumHigh
Attack Vector
Local1 (2.3%)
Network1 (2.3%)
Unknown41 (95.3%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low2 (4.7%)
High0 (0.0%)
Unknown41 (95.3%)
User Interaction
None2 (4.7%)
Unknown41 (95.3%)
Required0 (0.0%)
Privileges Required
Low1 (2.3%)
High0 (0.0%)
None1 (2.3%)
Unknown41 (95.3%)

Top CVEs

Signals from CVEs in this product scope (43 CVEs).

43 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
Stack-based buffer overflow in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and M
Feb 3, 20129.343NOYES
Directory traversal vulnerability in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels,
Feb 3, 20129.341NOYES
miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, a
Feb 3, 20128.538NOYES
Directory traversal vulnerability in miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update
Feb 3, 20127.838NOYES
HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels
Feb 3, 20127.135NOYES
The TELNET daemon in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11
Feb 3, 201210.030NONO
Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and
Feb 3, 201210.030NONO
The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11
Feb 3, 201210.028NONO
The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panel
Feb 3, 20129.328NONO
An XXE vulnerability has been identified in OPC Foundation UA .NET Sample Code before 2017-03-21 and Local Discovery Server (LDS) before 1.03.367. Among the affected products are S
Aug 30, 20178.227NONO

Exploit Exposure

Signals from CVEs in this product scope (43 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
5 CVEs
11.6% of CVEs· 86th percentile

Social Chatter

Signals from CVEs in this product scope (43 CVEs).

Media Mentions

Signals from CVEs in this product scope (43 CVEs).

Top CNAs Publishing CVEs For Wincc

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
v11127.55.9%05
7.316.82.1%00
7.216.82.1%00
7.195.81.4%00
7.0255.51.7%00
6.0155.51.8%00
5.0155.51.8%00
13.015.02.7%00
12.026.31.6%00
11.026.31.6%00