GCVE - cpe:2.3:a:siemens:simatic_wincc:7.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:simatic_wincc:7.0:*:*:*:*:*:*:*

part: a version: 7.0 update: *

Vendor	Siemens (`4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f`)
Product	Simatic Wincc (`924aba15-df48-5ac1-bbf7-2586cc109145`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-5744`	vulnerable	2026-06-08 05:07:57.671107	Details available Siemens SIMATIC WinCC 7.0 through SP3 and 7.2 allows remote attackers to read arbitrary WinCC station files via crafted packets. Published: 2016-07-22T15:00:00.000Z Updated: 2024-08-06T01:07:59.970Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/92116 http://www.securitytracker.com/id/1036441 https://ics-cert.us-cert.gov/advisories/ICSA-16-208-01 http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-378531.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8552`	vulnerable	2026-06-08 05:06:09.272513	Details available The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before Update 2; SIMATIC PCS 7 7.1 through SP4, 8.0 through SP2, and 8.1; and TIA Portal 13 before Update 6 allows remote attackers to read arbitrary files via crafted packets. Published: 2014-11-26T11:00:00.000Z Updated: 2024-08-06T13:18:48.641Z Open on db.gcve.eu Reference links http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-134508.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8551`	vulnerable	2026-06-08 05:06:09.264670	Details available The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before Update 2; SIMATIC PCS 7 7.1 through SP4, 8.0 through SP2, and 8.1; and TIA Portal 13 before Update 6 allows remote attackers to execute arbitrary code via crafted packets. Published: 2014-11-26T11:00:00.000Z Updated: 2024-08-06T13:18:48.431Z Open on db.gcve.eu Reference links http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-134508.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2772`	vulnerable	2026-06-08 04:55:10.517536	Details available Siemens Simatic WinCC and PCS 7 SCADA system uses a hard-coded password, which allows local users to access a back-end database and gain privileges, as demonstrated in the wild in July 2010 by the Stuxnet worm, a different vulnerability than CVE-2010-2568. Published: 2010-07-22T10:00:00.000Z Updated: 2024-08-07T02:46:48.161Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/60587 http://infoworld.com/d/security-central/siemens-warns-users-dont-change-passwords-after-worm-attack-915?sourcefssr http://support.automation.siemens.com/WW/llisapi.dll?func=cslib.csinfo&lang=en&objid=43876783&caller=viewhttp://support.automation.siemens.com/WW/llisapi.dll?func=cslib.csinfo&lang=en&objid=43876783&c http://ics-cert.us-cert.gov/advisories/ICSA-12-205-01 http://www.f-secure.com/weblog/archives/00001987.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.