Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:wincc:7.1:*:*:*:*:*:*:*

part: a version: 7.1 update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductWincc (33dfdc92-b209-510a-9c46-7ee51a7cc91b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-2823 vulnerable 2026-06-08 05:06:35.998668 Details available
Siemens SIMATIC HMI Basic Panels 2nd Generation before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC HMI Comfort Panels before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC WinCC Runtime Advanced before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC WinCC Runtime Professional before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC HMI Basic Panels 1st Generation (WinCC TIA Portal), SIMATIC HMI Mobile Panel 277 (WinCC TIA Portal), SIMATIC HMI Multi Panels (WinCC TIA Portal), and SIMATIC WinCC 7.x before 7.3 Upd4 allow remote attackers to complete authentication by leveraging knowledge of a password hash without knowledge of the associated password.
Published: 2015-04-08T16:00:00.000Z
Updated: 2024-08-06T05:24:39.120Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4686 vulnerable 2026-06-08 05:05:45.426368 Details available
The Project administration application in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, has a hardcoded encryption key, which allows remote attackers to obtain sensitive information by extracting this key from another product installation and then employing this key during the sniffing of network traffic on TCP port 1030.
Published: 2014-07-24T14:00:00.000Z
Updated: 2024-08-06T11:27:35.236Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4685 vulnerable 2026-06-08 05:05:45.425693 Details available
Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows local users to gain privileges by leveraging weak system-object access control.
Published: 2014-07-24T14:00:00.000Z
Updated: 2024-08-06T11:27:35.335Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4684 vulnerable 2026-06-08 05:05:45.425102 Details available
The database server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a request to TCP port 1433.
Published: 2014-07-24T14:00:00.000Z
Updated: 2024-08-06T11:27:35.308Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4683 vulnerable 2026-06-08 05:05:45.424489 Details available
The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a (1) HTTP or (2) HTTPS request.
Published: 2014-07-24T14:00:00.000Z
Updated: 2024-08-06T11:27:35.268Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4682 vulnerable 2026-06-08 05:05:45.423054 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3959 vulnerable 2026-06-08 05:04:33.352634 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3958 vulnerable 2026-06-08 05:04:33.351958 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3957 vulnerable 2026-06-08 05:04:33.350721 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.