Skip to content
OpenAdvisories
High SSA-691715 1 CVE

SSA-691715: Vulnerability in OPC Foundation Local Discovery Server Affecting Siemens Products

Published Apr 11, 2023 · Updated Sep 9, 2025 · Revision 8

Vendor: Siemens Product: OpenPCS 7 V9.1 Product: SIMATIC NET PC Software V14 Product: SIMATIC NET PC Software V15 Product: SIMATIC NET PC Software V16 Product: SIMATIC NET PC Software V17 Product: SIMATIC NET PC Software V18 Product: SIMATIC Process Historian 2020 OPC UA Server Product: SIMATIC Process Historian 2022 OPC UA Server Product: SIMATIC WinCC Product: SIMATIC WinCC Runtime Professional Product: SIMATIC WinCC Unified PC Runtime V18 Product: TeleControl Server Basic V3

Summary

A vulnerability was identified in OPC Foundation Local Discovery Server which also affects Siemens products that could allow an attacker to escalate privileges under certain circumstances.

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 1

  • High 7.8
    CVE-2022-44725

    OPC Foundation Local Discovery Server (LDS) through 1.04.403.478 uses a hard-coded file path to a configuration file. T…

Revision history

  1. #8

    Corrected fix version for SIMATIC NET PC Software V17

  2. #7

    Added fix for SIMATIC NET PC Software V16, clarified no fix planned for OpenPCS 7 V9.1

  3. #6

    Added fix for SIMATIC NET PC Software V18

  4. #5

    Added fix for TeleControl Server Basic V3

  5. #4

    Added fix for SIMATIC Process Historian 2022 OPC UA Server

  6. #3

    Added fix for SIMATIC WinCC Runtime Professional

  7. #2

    Added fix for SIMATIC NET PC Software V17, clarified no fix planned for SIMATIC Process Historian 2020 OPC UA Server, SIMATIC NET PC Software V14 and V15

  8. #1

    Publication Date

References