Medium SSA-730482 1 CVE

SSA-730482: Denial of Service Vulnerability in SIMATIC WinCC

Published Apr 9, 2024 · Updated Jan 14, 2025 · Revision 3

Vendor: Siemens Product: SIMATIC PCS 7 V9.1 Product: SIMATIC WinCC Runtime Professional V17 Product: SIMATIC WinCC Runtime Professional V18 Product: SIMATIC WinCC Runtime Professional V19 Product: SIMATIC WinCC V7.5 Product: SIMATIC WinCC V8.0

Summary

A vulnerability in the login dialog box of SIMATIC WinCC could allow a local attacker to cause a denial of service condition in the runtime of the SCADA system.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

Medium 6.2

CVE-2023-50821

A vulnerability has been identified in SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC04), SIMATIC WinCC Runtime Profess…

Siemens SIMATIC WinCC V7.5 SIMATIC PCS 7 V9.1 SIMATIC WinCC V8.0 ICS / OT

Apr 9, 2024

Revision history

2025-01-14 #3
Added fix for SIMATIC WinCC Runtime Professional V17
2024-07-09 #2
Added fix for SIMATIC WinCC V8.0 and SIMATIC WinCC Runtime Professional V18
2024-04-09 #1
Publication Date

References

SSA-730482: Denial of Service Vulnerability in SIMATIC WinCC - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-730482.html