Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:wincc:7.0:*:*:*:*:*:*:*

part: a version: 7.0 update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductWincc (33dfdc92-b209-510a-9c46-7ee51a7cc91b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-2823 vulnerable 2026-06-08 05:06:35.998029 Details available
Siemens SIMATIC HMI Basic Panels 2nd Generation before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC HMI Comfort Panels before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC WinCC Runtime Advanced before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC WinCC Runtime Professional before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC HMI Basic Panels 1st Generation (WinCC TIA Portal), SIMATIC HMI Mobile Panel 277 (WinCC TIA Portal), SIMATIC HMI Multi Panels (WinCC TIA Portal), and SIMATIC WinCC 7.x before 7.3 Upd4 allow remote attackers to complete authentication by leveraging knowledge of a password hash without knowledge of the associated password.
Published: 2015-04-08T16:00:00.000Z
Updated: 2024-08-06T05:24:39.120Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4686 vulnerable 2026-06-08 05:05:45.426296 Details available
The Project administration application in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, has a hardcoded encryption key, which allows remote attackers to obtain sensitive information by extracting this key from another product installation and then employing this key during the sniffing of network traffic on TCP port 1030.
Published: 2014-07-24T14:00:00.000Z
Updated: 2024-08-06T11:27:35.236Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4685 vulnerable 2026-06-08 05:05:45.425629 Details available
Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows local users to gain privileges by leveraging weak system-object access control.
Published: 2014-07-24T14:00:00.000Z
Updated: 2024-08-06T11:27:35.335Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4684 vulnerable 2026-06-08 05:05:45.425038 Details available
The database server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a request to TCP port 1433.
Published: 2014-07-24T14:00:00.000Z
Updated: 2024-08-06T11:27:35.308Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4683 vulnerable 2026-06-08 05:05:45.424422 Details available
The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a (1) HTTP or (2) HTTPS request.
Published: 2014-07-24T14:00:00.000Z
Updated: 2024-08-06T11:27:35.268Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4682 vulnerable 2026-06-08 05:05:45.420843 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3959 vulnerable 2026-06-08 05:04:33.352568 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3958 vulnerable 2026-06-08 05:04:33.351893 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3957 vulnerable 2026-06-08 05:04:33.348645 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0679 vulnerable 2026-06-08 05:03:49.418892 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0678 vulnerable 2026-06-08 05:03:49.418090 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0677 vulnerable 2026-06-08 05:03:49.402576 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0676 vulnerable 2026-06-08 05:03:49.401873 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0675 vulnerable 2026-06-08 05:03:49.401145 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0674 vulnerable 2026-06-08 05:03:49.398064 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3034 vulnerable 2026-06-08 05:02:07.773912 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3032 vulnerable 2026-06-08 05:02:07.773204 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3031 vulnerable 2026-06-08 05:02:07.772687 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3030 vulnerable 2026-06-08 05:02:07.772183 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3028 vulnerable 2026-06-08 05:02:07.770429 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.