Skip to content
OpenAdvisories
High SSA-970803 1 CVE

SSA-970803: Insecure User Authentication in SIMATIC SCADA and PCS 7 systems

Published Nov 10, 2026 · Updated Nov 10, 2026

Vendor: Siemens Product: SIMATIC BATCH V9.1 Product: SIMATIC Information Server 2020 Product: SIMATIC Information Server 2022 Product: SIMATIC PCS 7 V9.1 Product: SIMATIC Process Historian 2020 Product: SIMATIC Process Historian 2022 Product: SIMATIC WinCC Runtime Professional V17 Product: SIMATIC WinCC Runtime Professional V18 Product: SIMATIC WinCC Runtime Professional V19 Product: SIMATIC WinCC Runtime Professional V20 Product: SIMATIC WinCC Runtime Professional V21 Product: SIMATIC WinCC V7.5 Product: SIMATIC WinCC V8.0 Product: SIMATIC WinCC V8.1

Summary

The products listed below contain an authentication bypass vulnerability that could allow an on-path attacker to take over the session of a legitimate user and execute arbitrary code with the privileges of the victim user.

Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or not yet available.

Vulnerabilities 1

Revision history

  1. #1

    Publication Date

References