A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC06), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1 UC01), SIMATIC WinCC Runtime Professional V16 and earlier (All versions), SIMATIC WinCC Runtime Professional V17 (All versions < V17 Upd4), SIMATIC WinCC V7.3 (All versions), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 21), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 8). A missing printer configuration on the host could allow an authenticated attacker to escape the WinCC Kiosk Mode.
AI analysis not yet available
Plain-English explanation, risk summary, and remediation steps will appear here once AI analysis is complete.
No Fix Known
No patch has been released yet. Apply workarounds or mitigations where available.
| Vendor | Product | Versions | Fixed In |
|---|---|---|---|
| siemens | simatic_pcs_7 | 9.0 | - |
| siemens | simatic_pcs_7 | - | - |
| siemens | simatic_wincc | 7.4 |
Published
CVE disclosed publicly
Last Modified
Most recent update
Indexed to CVEInsight
Added to this platform
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
17
Affected Products
2
References
siemens / simatic_pcs_7
| - |
| siemens | simatic_wincc | - | - |
| siemens | simatic_wincc | - | - |
| siemens | simatic_wincc | - | - |
| siemens | simatic_wincc | - | - |
| siemens | simatic_wincc | - | - |
| siemens | simatic_wincc | - | - |
| siemens | simatic_wincc | - | - |
| siemens | simatic_wincc | - | - |
| siemens | simatic_wincc | - | - |
| siemens | simatic_wincc | - | - |
| siemens | simatic_wincc | - | - |
| siemens | simatic_wincc | - | - |
| siemens | simatic_wincc_runtime_professional | 16 | - |
| siemens | simatic_wincc_runtime_professional | - | - |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability
Impact