Filtered by vendor Siemens
Subscriptions
Filtered by product Wincc
Subscriptions
Total
43 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2012-2597 | 1 Siemens | 1 Wincc | 2025-04-11 | N/A |
Multiple directory traversal vulnerabilities in Siemens WinCC 7.0 SP3 before Update 2 allow remote authenticated users to read arbitrary files via a crafted parameter in a URL. | ||||
CVE-2012-2598 | 1 Siemens | 1 Wincc | 2025-04-11 | N/A |
Buffer overflow in the DiagAgent web server in Siemens WinCC 7.0 SP3 through Update 2 allows remote attackers to cause a denial of service (agent outage) via crafted input. | ||||
CVE-2023-30897 | 1 Siemens | 1 Wincc | 2025-01-03 | 7.8 High |
A vulnerability has been identified in SIMATIC WinCC (All versions < V7.5.2.13). Affected applications fail to set proper access rights for their installation folder if a non-default installation path was chosen during installation. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges. |