CVE-2022-24287

mediumPriorität · verfolgen · 18OT-Risiko · erhöhtEPSS 0.002 · 15. PerzentilDEEURUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
0.24% (15th) EPSS
CVSS 4.6 · medium
Is it mine?
42 products
Prüfe deine Angriffsfläche
Who says so?
5 sources
cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-27

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC06), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1 UC01), SIMATIC WinCC Runtime Professional V16 and earlier (All versions), SIMATIC WinCC Runtime Professional V17 (All versions < V17 Upd4), SIMATIC WinCC V7.3 (All versions), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 21), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 8). A missing printer configuration on the host could allow an authenticated attacker to escape the WinCC Kiosk Mode.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • BehobenSIMATIC PCS 7 V9.0siemens_psirt

    Update SIMATIC WinCC to V7.4 SP 1 Update 21 or later version

  • BehobenSIMATIC PCS 7 V9.1siemens_psirt

    Update to V9.1 SP1 UC01 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109805072/
  • BehobenSIMATIC WinCC Runtime Professional V17siemens_psirt

    Update to V17 Upd4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109800913/
  • BehobenSIMATIC WinCC V7.4siemens_psirt

    Update to V7.4 SP1 Update 21 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806846/
  • BehobenSIMATIC WinCC V7.5siemens_psirt

    Update to V7.5 SP2 Update 8 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109793460/
  • BehobenSIMATIC PCS 7 V9.0cisa_csaf_ot

    Update SIMATIC WinCC to V7.4 SP 1 Update 21 or later version

  • BehobenSIMATIC PCS 7 V9.1cisa_csaf_ot

    Update to V9.1 SP1 UC01 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109805072/
  • BehobenSIMATIC WinCC Runtime Professional V17cisa_csaf_ot

    Update to V17 Upd4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109800913/
  • BehobenSIMATIC WinCC V7.4cisa_csaf_ot

    Update to V7.4 SP1 Update 21 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109806846/
  • BehobenSIMATIC WinCC V7.5cisa_csaf_ot

    Update to V7.5 SP2 Update 8 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109793460/
  • MitigationSIMATIC PCS 7 V8.2siemens_psirt

    At least one default printer (but not a file based printer, as e.g. PDF/XPS printer) should be installed on the affected system

  • MitigationSIMATIC PCS 7 V9.0siemens_psirt

    At least one default printer (but not a file based printer, as e.g. PDF/XPS printer) should be installed on the affected system

  • MitigationSIMATIC PCS 7 V9.1siemens_psirt

    At least one default printer (but not a file based printer, as e.g. PDF/XPS printer) should be installed on the affected system

  • MitigationSIMATIC WinCC Runtime Professional V16 and earliersiemens_psirt

    At least one default printer (but not a file based printer, as e.g. PDF/XPS printer) should be installed on the affected system

  • MitigationSIMATIC WinCC Runtime Professional V17siemens_psirt

    At least one default printer (but not a file based printer, as e.g. PDF/XPS printer) should be installed on the affected system

  • MitigationSIMATIC WinCC V7.3siemens_psirt

    At least one default printer (but not a file based printer, as e.g. PDF/XPS printer) should be installed on the affected system

  • MitigationSIMATIC WinCC V7.4siemens_psirt

    At least one default printer (but not a file based printer, as e.g. PDF/XPS printer) should be installed on the affected system

  • MitigationSIMATIC WinCC V7.5siemens_psirt

    At least one default printer (but not a file based printer, as e.g. PDF/XPS printer) should be installed on the affected system

  • MitigationSIMATIC PCS 7 V8.2cisa_csaf_ot

    At least one default printer (but not a file based printer, as e.g. PDF/XPS printer) should be installed on the affected system

  • MitigationSIMATIC PCS 7 V9.0cisa_csaf_ot

    At least one default printer (but not a file based printer, as e.g. PDF/XPS printer) should be installed on the affected system

  • MitigationSIMATIC PCS 7 V9.1cisa_csaf_ot

    At least one default printer (but not a file based printer, as e.g. PDF/XPS printer) should be installed on the affected system

  • MitigationSIMATIC WinCC Runtime Professional V16 and earliercisa_csaf_ot

    At least one default printer (but not a file based printer, as e.g. PDF/XPS printer) should be installed on the affected system

  • MitigationSIMATIC WinCC Runtime Professional V17cisa_csaf_ot

    At least one default printer (but not a file based printer, as e.g. PDF/XPS printer) should be installed on the affected system

  • MitigationSIMATIC WinCC V7.3cisa_csaf_ot

    At least one default printer (but not a file based printer, as e.g. PDF/XPS printer) should be installed on the affected system

  • MitigationSIMATIC WinCC V7.4cisa_csaf_ot

    At least one default printer (but not a file based printer, as e.g. PDF/XPS printer) should be installed on the affected system

  • MitigationSIMATIC WinCC V7.5cisa_csaf_ot

    At least one default printer (but not a file based printer, as e.g. PDF/XPS printer) should be installed on the affected system

  • Kein Fix geplantSIMATIC PCS 7 V8.2siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantSIMATIC WinCC Runtime Professional V16 and earliersiemens_psirt

    Currently no fix is planned

  • Kein Fix geplantSIMATIC WinCC V7.3siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantSIMATIC PCS 7 V8.2cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantSIMATIC WinCC Runtime Professional V16 and earliercisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantSIMATIC WinCC V7.3cisa_csaf_ot

    Currently no fix is planned

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.8
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · low–high · 3.9–7.8

v2.04.6mediumAV:L/AC:L/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 6.4
v2.03.9lowAV:L/AC:L/Au:N/C:P/I:P/A:P/E:Usecondary · CVSS-BT (t0sche)
v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · CISA US
v3.17.8highAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU
v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · ENISA EU
v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · productcert@siemens.com DEAusnutzbarkeit 1.8 · Auswirkung 5.9
v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE
v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · NVD / NIST USAusnutzbarkeit 1.8 · Auswirkung 5.9
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-1188USCWE-1188USCWE-1188USCWE-1188US
04

betroffene Produkte (42)

Betroffene Produkte und Versionsbereiche.

20 von 42 angezeigt
05

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

  • SSA-363107SSA-363107: An Improper Initialization Vulnerability Affects SIMATIC WinCC Kiosk Mode2022-05-10csaf · siemens_psirtDE

    A vulnerability was found in SIMATIC WinCC that could allow authenticated attackers to escape the Kiosk Mode. Siemens has released updates for the affected products and recommends to update to the latest versions.

  • ICSA-22-132-06Siemens SIMATIC WinCC2022-05-10icsa · cisa_csaf_otUS

    A vulnerability was found in SIMATIC WinCC that could allow authenticated attackers to escape the Kiosk Mode. Siemens has released updates for the affected products and recommends to update to the latest versions.

06

auch bekannt als (5)

Weitere Namen und Kennungen dieser Entität.

07

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdfstec_bducisa_csaf_otsiemens_psirtNVDCVE.orgMITRE
veröffentlicht 2022-05-20geändert 2026-06-17
08

Referenzen (8)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan