Skip to content
OpenAdvisories
Medium ICSA-13-079-02 6 CVEs

Siemens WinCC 7.0 SP3 Multiple Vulnerabilities

Published Dec 22, 2013 · Updated Jun 6, 2025 · Revision 2

Vendor: Siemens Product: WinCC

Vulnerabilities 6

  • Unscored —
    CVE-2013-0674

    Buffer overflow in the RegReader ActiveX control in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 an…

  • Unscored —
    CVE-2013-0675

    Buffer overflow in CCEServer (aka the central communications component) in Siemens WinCC before 7.2, as used in SIMATIC…

  • Unscored —
    CVE-2013-0676

    Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, does not properly assign privilege…

  • Unscored —
    CVE-2013-0677

    The web server in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote at…

  • Unscored —
    CVE-2013-0678

    Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, does not properly represent WebNav…

  • Unscored —
    CVE-2013-0679

    Directory traversal vulnerability in the web server in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1…

Revision history

  1. #2

    Advisory converted into a CSAF

  2. #1

    Initial Publication

References