Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:simatic_wincc_runtime:-:*:*:*:advanced:*:*:*

part: a version: - update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductSimatic Wincc Runtime (9f3153d0-1768-5954-bf6f-0a7d1e79dd7a)
Edition*
Language*
Software editionadvanced
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-30694 vulnerable 2026-06-08 05:43:38.860429 Details available
MEDIUM (6.5)
The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack.
Published: 2022-11-08T00:00:00.000Z
Updated: 2025-04-21T13:47:33.635Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3321 vulnerable 2026-06-08 04:59:24.608361 Details available
Heap-based buffer overflow in the Siemens WinCC Runtime Advanced Loader, as used in SIMATIC WinCC flexible Runtime and SIMATIC WinCC (TIA Portal) Runtime Advanced, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted packet to TCP port 2308.
Published: 2011-09-15T21:00:00.000Z
Updated: 2024-08-06T23:29:56.827Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.