Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2952▲ 10 respecto a la semana anterior
Críticas / altas1451▲ 185 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)272▼ 254 respecto a la semana anterior
14 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.5) | 0.47% | — | Siemens PCS 7Siemens Primary Setup ToolSiemens Security Configuration ToolSiemens Simatic Automation Tool+12 | 11/5/2017 | 17/6/2026 | A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC Automation Tool (All versions < V3.0), SIMATIC NET PC-Software (All versions < V14 SP1), SIMATIC PCS 7 V8.1 (All versions), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1), SIMATIC STEP 7 (TIA Portal) V13 (All versions <… | |
| Modificada | Alta (8.5) | 12% | — | Siemens Wincc FlexibleSiemens WinccSiemens Simatic HMI PanelsSiemens Wincc Runtime Advanced+1 | 3/2/2012 | 16/6/2026 | miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime does not properly handle URIs beginning with a… | |
| Modificada | Alta (7.8) | 11% | — | Siemens Wincc FlexibleSiemens WinccSiemens Simatic HMI PanelsSiemens Wincc Runtime Advanced+1 | 3/2/2012 | 16/6/2026 | Directory traversal vulnerability in miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allows… | |
| Modificada | Alta (7.1) | 7.3% | — | Siemens Wincc FlexibleSiemens WinccSiemens Simatic HMI PanelsSiemens Wincc Runtime Advanced+1 | 3/2/2012 | 16/6/2026 | HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is enabled, allows remote attackers to cause a denial of… | |
| Modificada | Alta (9.3) | 9.0% | — | Siemens Wincc FlexibleSiemens WinccSiemens Simatic HMI PanelsSiemens Wincc Runtime Advanced+1 | 3/2/2012 | 16/6/2026 | Directory traversal vulnerability in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is enabled, allows remote… | |
| Modificada | Alta (9.3) | 14% | — | Siemens Wincc FlexibleSiemens WinccSiemens Simatic HMI PanelsSiemens Wincc Runtime Advanced+1 | 3/2/2012 | 16/6/2026 | Stack-based buffer overflow in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is enabled, allows remote… | |
| Modificada | Alta (10) | 3.4% | — | Siemens Wincc FlexibleSiemens WinccSiemens Simatic HMI PanelsSiemens Wincc Runtime Advanced+1 | 3/2/2012 | 16/6/2026 | The TELNET daemon in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime does not perform authentication, which makes it easier for remote attackers to obtain access… | |
| Modificada | Alta (10) | 4.8% | — | Siemens Wincc FlexibleSiemens WinccSiemens Simatic HMI PanelsSiemens Wincc Runtime Advanced+1 | 3/2/2012 | 16/6/2026 | Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allow user-assisted remote attackers to execute arbitrary code via a crafted project file, related to the HMI web… | |
| Modificada | Media (5) | 1.6% | — | Siemens Wincc FlexibleSiemens WinccSiemens Simatic HMI PanelsSiemens Wincc Runtime Advanced+1 | 3/2/2012 | 16/6/2026 | CRLF injection vulnerability in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allows remote attackers to… | |
| Modificada | Media (4.3) | 1.4% | — | Siemens Wincc FlexibleSiemens WinccSiemens Simatic HMI PanelsSiemens Wincc Runtime Advanced+1 | 3/2/2012 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allows remote… | |
| Modificada | Media (4.3) | 1.4% | — | Siemens Wincc FlexibleSiemens WinccSiemens Simatic HMI PanelsSiemens Wincc Runtime Advanced+1 | 3/2/2012 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allows remote… | |
| Modificada | Alta (10) | 2.0% | — | Siemens Wincc FlexibleSiemens WinccSiemens Simatic HMI PanelsSiemens Wincc Runtime Advanced+1 | 3/2/2012 | 16/6/2026 | The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime has an improperly selected default password for the administrator account, which makes it… | |
| Modificada | Alta (9.3) | 3.0% | — | Siemens Wincc FlexibleSiemens WinccSiemens Simatic HMI PanelsSiemens Wincc Runtime Advanced+1 | 3/2/2012 | 16/6/2026 | The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime generates predictable authentication tokens for cookies, which… | |
| Modificada | Alta (9.3) | 7.1% | — | Siemens Simatic Wincc Flexible RuntimeSiemens Simatic Wincc Runtime | 16/9/2011 | 16/6/2026 | Heap-based buffer overflow in the Siemens WinCC Runtime Advanced Loader, as used in SIMATIC WinCC flexible Runtime and SIMATIC WinCC (TIA Portal) Runtime Advanced, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted packet to TCP port 2308. |