GCVE - cpe:2.3:a:siemens:simatic_pcs7:*:sp1:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:simatic_pcs7:*:sp1:*:*:*:*:*:*

part: a version: * update: sp1

Vendor	Siemens (`4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f`)
Product	Simatic Pcs7 (`9f58b9ea-c182-5303-83d3-d180a082e12c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-4686`	vulnerable	2026-06-08 05:05:45.426039	Details available The Project administration application in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, has a hardcoded encryption key, which allows remote attackers to obtain sensitive information by extracting this key from another product installation and then employing this key during the sniffing of network traffic on TCP port 1030. Published: 2014-07-24T14:00:00.000Z Updated: 2024-08-06T11:27:35.236Z Open on db.gcve.eu Reference links http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-214365.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-4685`	vulnerable	2026-06-08 05:05:45.425460	Details available Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows local users to gain privileges by leveraging weak system-object access control. Published: 2014-07-24T14:00:00.000Z Updated: 2024-08-06T11:27:35.335Z Open on db.gcve.eu Reference links http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-214365.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-4684`	vulnerable	2026-06-08 05:05:45.424863	Details available The database server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a request to TCP port 1433. Published: 2014-07-24T14:00:00.000Z Updated: 2024-08-06T11:27:35.308Z Open on db.gcve.eu Reference links http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-214365.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-4683`	vulnerable	2026-06-08 05:05:45.424237	Details available The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a (1) HTTP or (2) HTTPS request. Published: 2014-07-24T14:00:00.000Z Updated: 2024-08-06T11:27:35.268Z Open on db.gcve.eu Reference links http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-214365.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-4682`	vulnerable	2026-06-08 05:05:45.415333	Details available The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote attackers to obtain sensitive information via an HTTP request. Published: 2014-07-24T14:00:00.000Z Updated: 2024-08-06T11:27:35.298Z Open on db.gcve.eu Reference links http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-214365.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3959`	vulnerable	2026-06-08 05:04:33.352510	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3958`	vulnerable	2026-06-08 05:04:33.351834	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3957`	vulnerable	2026-06-08 05:04:33.346970	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.