Skip to content
OpenAdvisories
High SSA-363107 1 CVE

SSA-363107: An Improper Initialization Vulnerability Affects SIMATIC WinCC Kiosk Mode

Published May 10, 2022 · Updated Nov 14, 2023 · Revision 5

Vendor: Siemens Product: SIMATIC PCS 7 V8.2 Product: SIMATIC PCS 7 V9.0 Product: SIMATIC PCS 7 V9.1 Product: SIMATIC WinCC Runtime Professional V16 and earlier Product: SIMATIC WinCC Runtime Professional V17 Product: SIMATIC WinCC V7.3 Product: SIMATIC WinCC V7.4 Product: SIMATIC WinCC V7.5

Summary

A vulnerability was found in SIMATIC WinCC that could allow authenticated attackers to escape the Kiosk Mode.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

Revision history

  1. #5

    No fix planned for SIMATIC PCS 7 V8.2

  2. #4

    Added fix for SIMATIC PCS 7 V9.0

  3. #3

    Added fix for SIMATIC WinCC V7.4 and update remediation for SIMATIC PCS 7 V9.0

  4. #2

    Updated fix for SIMATIC PCS 7 V9.1 and added fix for SIMATIC WinCC Runtime Professional V17

  5. #1

    Publication Date

References