Siemens SIMATIC WinCC OA 3.18

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:simatic_wincc_oa:3.18:-:*:*:*:*:*:*

part: a version: 3.18 update: -

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductSimatic Wincc Oa (50a6369f-ae3e-550d-b0ca-02fc43d09a0f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-44731 vulnerable 2026-06-08 05:49:36.298807 Details available
MEDIUM (5.4)
A vulnerability has been identified in SIMATIC WinCC OA V3.15 (All versions < V3.15 P038), SIMATIC WinCC OA V3.16 (All versions < V3.16 P035), SIMATIC WinCC OA V3.17 (All versions < V3.17 P024), SIMATIC WinCC OA V3.18 (All versions < V3.18 P014). The affected component allows to inject custom arguments to the Ultralight Client backend application under certain circumstances. This could allow an authenticated remote attacker to inject arbitrary parameters when starting the client via the web interface (e.g., open attacker chosen panels with the attacker's credentials or start a Ctrl script).
Published: 2022-12-13T00:00:00.000Z
Updated: 2025-04-21T13:43:45.574Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20093 vulnerable 2026-06-08 05:29:08.445951 Details available
A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a. An unauthenticated remote attacker can exploit this issue to disclose heap memory contents or crash the CodeMeter Runtime Server.
Published: 2021-06-16T11:09:02.000Z
Updated: 2024-08-03T17:30:07.515Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.