CVE-2018-4832

mediumpriority · track · 31EPSS 0.024 · 84 %ileDEEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

2.42% (84th) EPSS

CVSS 4.3 · medium

Is it mine?

157 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · scored 2026-10-27

A vulnerability has been identified in OpenPCS 7 V7.1 and earlier (All versions), OpenPCS 7 V8.0 (All versions), OpenPCS 7 V8.1 (All versions < V8.1 Upd5), OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions < V9.0 Upd1), SIMATIC BATCH V7.1 and earlier (All versions), SIMATIC BATCH V8.0 (All versions < V8.0 SP1 Upd21), SIMATIC BATCH V8.1 (All versions < V8.1 SP1 Upd16), SIMATIC BATCH V8.2 (All versions < V8.2 Upd10), SIMATIC BATCH V9.0 (All versions < V9.0 SP1), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions < 15 SP1), SIMATIC PCS 7 V7.1 and earlier (All versions), SIMATIC PCS 7 V8.0 (All versions), SIMATIC PCS 7 V8.1 (All versions), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP1), SIMATIC Route Control V7.1 and earlier (All versions), SIMATIC Route Control V8.0 (All versions), SIMATIC Route Control V8.1 (All versions), SIMATIC Route Control V8.2 (All versions), SIMATIC Route Control V9.0 (All versions < V9.0 Upd1), SIMATIC WinCC Runtime Professional V13 (All versions < V13 SP2 Upd2), SIMATIC WinCC Runtime Professional V14 (All versions < V14 SP1 Upd5), SIMATIC WinCC V7.2 and earlier (All versions < WinCC 7.2 Upd 15), SIMATIC WinCC V7.3 (All versions < WinCC 7.3 Upd 16), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Upd 4), SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). Specially crafted messages sent to the RPC service of the affected products could cause a Denial-of-Service condition on the remote and local communication functionality of the affected products. A reboot of the system is required to recover the remote and local communication functionality. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedOpenPCS 7 V8.1siemens_psirt
Update to OpenPCS 7 V8.1 Upd 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109761055
FixedOpenPCS 7 V8.2siemens_psirt
See remediation for PCS 7 V8.2
FixedOpenPCS 7 V9.0siemens_psirt
See remediation for PCS 7 V9.0
FixedSIMATIC BATCH V8.0siemens_psirt
Update to SIMATIC BATCH V8.0 SP1 Upd21 or later version
https://support.industry.siemens.com/cs/ww/en/view/109756847
FixedSIMATIC BATCH V8.1siemens_psirt
Update to SIMATIC BATCH V8.1 SP1 Upd16 or later version
https://support.industry.siemens.com/cs/ww/en/view/109756846
FixedSIMATIC BATCH V8.2siemens_psirt
Update to SIMATIC BATCH V8.2 Upd10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757796
FixedSIMATIC BATCH V9.0siemens_psirt
See remediation for PCS 7 V9.0
FixedSIMATIC NET PC Software V14siemens_psirt
Update to V14 SP1 Update 14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807351/
FixedSIMATIC NET PC Software V15siemens_psirt
Update to V15 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109762690
FixedSIMATIC PCS 7 V8.2siemens_psirt
Update to V8.2 SP1 or later version
FixedSIMATIC PCS 7 V9.0siemens_psirt
Update to V9.0 SP1 (Includes Open PCS 7 V9.0 Upd1, SIMATIC Batch V9.0 SP1, SIMATIC Route Control V9.0 Upd1 and SIMATIC WinCC V7.4 SP1 Upd4).
FixedSIMATIC Route Control V8.2siemens_psirt
See remediation for PCS 7 V8.2
FixedSIMATIC Route Control V9.0siemens_psirt
See remediation for PCS 7 V9.0
FixedSIMATIC WinCC Runtime Professional V13siemens_psirt
Update to V13 SP2 Upd2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109759753
FixedSIMATIC WinCC Runtime Professional V14siemens_psirt
Update to V14 SP1 Upd5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109747394
FixedSIMATIC WinCC V7.2 and earliersiemens_psirt
Update to WinCC 7.2 Upd 15 or later version
https://support.industry.siemens.com/cs/ww/en/view/109762887
FixedSIMATIC WinCC V7.3siemens_psirt
Update to WinCC 7.3 Upd 16 or later version
https://support.industry.siemens.com/cs/ww/en/view/109756123
FixedSIMATIC WinCC V7.4siemens_psirt
Update to V7.4 SP1 Upd 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109753031
FixedOpenPCS 7 V8.1cisa_csaf_ot
Update to OpenPCS 7 V8.1 Upd 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109761055
FixedOpenPCS 7 V8.2cisa_csaf_ot
See remediation for PCS 7 V8.2
FixedOpenPCS 7 V9.0cisa_csaf_ot
See remediation for PCS 7 V9.0
FixedSIMATIC BATCH V8.0cisa_csaf_ot
Update to SIMATIC BATCH V8.0 SP1 Upd21 or later version
https://support.industry.siemens.com/cs/ww/en/view/109756847
FixedSIMATIC BATCH V8.1cisa_csaf_ot
Update to SIMATIC BATCH V8.1 SP1 Upd16 or later version
https://support.industry.siemens.com/cs/ww/en/view/109756846
FixedSIMATIC BATCH V8.2cisa_csaf_ot
Update to SIMATIC BATCH V8.2 Upd10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757796
FixedSIMATIC BATCH V9.0cisa_csaf_ot
See remediation for PCS 7 V9.0
FixedSIMATIC NET PC Software V14cisa_csaf_ot
Update to V14 SP1 Update 14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807351/
FixedSIMATIC NET PC Software V15cisa_csaf_ot
Update to V15 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109762690
FixedSIMATIC PCS 7 V8.2cisa_csaf_ot
Update to V8.2 SP1 or later version
FixedSIMATIC PCS 7 V9.0cisa_csaf_ot
Update to V9.0 SP1 (Includes Open PCS 7 V9.0 Upd1, SIMATIC Batch V9.0 SP1, SIMATIC Route Control V9.0 Upd1 and SIMATIC WinCC V7.4 SP1 Upd4).
FixedSIMATIC Route Control V8.2cisa_csaf_ot
See remediation for PCS 7 V8.2
FixedSIMATIC Route Control V9.0cisa_csaf_ot
See remediation for PCS 7 V9.0
FixedSIMATIC WinCC Runtime Professional V13cisa_csaf_ot
Update to V13 SP2 Upd2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109759753
FixedSIMATIC WinCC Runtime Professional V14cisa_csaf_ot
Update to V14 SP1 Upd5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109747394
FixedSIMATIC WinCC V7.2 and earliercisa_csaf_ot
Update to WinCC 7.2 Upd 15 or later version
https://support.industry.siemens.com/cs/ww/en/view/109762887
FixedSIMATIC WinCC V7.3cisa_csaf_ot
Update to WinCC 7.3 Upd 16 or later version
https://support.industry.siemens.com/cs/ww/en/view/109756123
FixedSIMATIC WinCC V7.4cisa_csaf_ot
Update to V7.4 SP1 Upd 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109753031
FixedSPPA-T3000 Application Servercisa_csaf_ot
Please contact your Siemens Energy service management organization to obtain the update to Service Pack R8.2 SP2.
MitigationOpenPCS 7 V7.1 and earliersiemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationOpenPCS 7 V8.0siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationOpenPCS 7 V8.1siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationOpenPCS 7 V8.2siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationOpenPCS 7 V9.0siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC BATCH V7.1 and earliersiemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC BATCH V8.0siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC BATCH V8.1siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC BATCH V8.2siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC BATCH V9.0siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC NET PC Software V14siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC NET PC Software V15siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC PCS 7 V7.1 and earliersiemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC PCS 7 V8.0siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC PCS 7 V8.1siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC PCS 7 V8.2siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC PCS 7 V9.0siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC Route Control V7.1 and earliersiemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC Route Control V8.0siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC Route Control V8.1siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC Route Control V8.2siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC Route Control V9.0siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC WinCC Runtime Professional V13siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC WinCC Runtime Professional V14siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC WinCC V7.2 and earliersiemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC WinCC V7.3siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC WinCC V7.4siemens_psirt
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationOpenPCS 7 V7.1 and earliercisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationOpenPCS 7 V8.0cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationOpenPCS 7 V8.1cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationOpenPCS 7 V8.2cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationOpenPCS 7 V9.0cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC BATCH V7.1 and earliercisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC BATCH V8.0cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC BATCH V8.1cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC BATCH V8.2cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC BATCH V9.0cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC NET PC Software V14cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC NET PC Software V15cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC PCS 7 V7.1 and earliercisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC PCS 7 V8.0cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC PCS 7 V8.1cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC PCS 7 V8.2cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC PCS 7 V9.0cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC Route Control V7.1 and earliercisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC Route Control V8.0cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC Route Control V8.1cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC Route Control V8.2cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC Route Control V9.0cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC WinCC Runtime Professional V13cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC WinCC Runtime Professional V14cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC WinCC V7.2 and earliercisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC WinCC V7.3cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSIMATIC WinCC V7.4cisa_csaf_ot
Ensure that SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC PCS 7 stations communicate via encrypted channels (i.e. activate feature “Encrypted Communication” in SIMATIC WinCC V7.3 or newer and SIMATIC PCS 7 V8.1 or newer). Enabling “Encrypted Communication” completely mitigates the vulnerability.
MitigationSPPA-T3000 Application Servercisa_csaf_ot
External components should be connected only to the SPPA-T3000 DMZ; no bridging of an external network to either the Application- or Automation highways is allowed
No fix plannedOpenPCS 7 V7.1 and earliersiemens_psirt
Currently no fix is planned
No fix plannedOpenPCS 7 V8.0siemens_psirt
Currently no fix is planned
No fix plannedSIMATIC BATCH V7.1 and earliersiemens_psirt
Currently no fix is planned
No fix plannedSIMATIC PCS 7 V7.1 and earliersiemens_psirt
Currently no fix is planned
No fix plannedSIMATIC PCS 7 V8.0siemens_psirt
Currently no fix is planned
No fix plannedSIMATIC PCS 7 V8.1siemens_psirt
Currently no fix is planned
No fix plannedSIMATIC Route Control V7.1 and earliersiemens_psirt
Currently no fix is planned
No fix plannedSIMATIC Route Control V8.0siemens_psirt
Currently no fix is planned
No fix plannedSIMATIC Route Control V8.1siemens_psirt
Currently no fix is planned
No fix plannedOpenPCS 7 V7.1 and earliercisa_csaf_ot
Currently no fix is planned
No fix plannedOpenPCS 7 V8.0cisa_csaf_ot
Currently no fix is planned
No fix plannedSIMATIC BATCH V7.1 and earliercisa_csaf_ot
Currently no fix is planned
No fix plannedSIMATIC PCS 7 V7.1 and earliercisa_csaf_ot
Currently no fix is planned
No fix plannedSIMATIC PCS 7 V8.0cisa_csaf_ot
Currently no fix is planned
No fix plannedSIMATIC PCS 7 V8.1cisa_csaf_ot
Currently no fix is planned
No fix plannedSIMATIC Route Control V7.1 and earliercisa_csaf_ot
Currently no fix is planned
No fix plannedSIMATIC Route Control V8.0cisa_csaf_ot
Currently no fix is planned
No fix plannedSIMATIC Route Control V8.1cisa_csaf_ot
Currently no fix is planned

cvss

Technical severity, 0–10. One row per scoring source.

7.5

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4.3–7.5

v2.04.3mediumAV:N/AC:M/Au:N/C:N/I:N/A:Pprimary · NVD / NIST USexploitability 8.6 · impact 2.9

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 3.6

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:Csecondary · CISA US

v3.17.5highAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE

v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-20USprimaryCWE-20USCWE-20USCWE-20US

affected products (157)

Products and version ranges known to be affected.

OpenPCS 7 V7.1 and earlierall versionscisa_csaf_otUS
OpenPCS 7 V8.0all versionscisa_csaf_otUS
OpenPCS 7 V8.1all versionscisa_csaf_otUS
OpenPCS 7 V8.2all versionscisa_csaf_otUS
OpenPCS 7 V9.0all versionscisa_csaf_otUS
SIMATIC BATCH V7.1 and earlierall versionscisa_csaf_otUS
SIMATIC BATCH V8.0all versionscisa_csaf_otUS
SIMATIC BATCH V8.1all versionscisa_csaf_otUS
SIMATIC BATCH V8.2all versionscisa_csaf_otUS
SIMATIC BATCH V9.0all versionscisa_csaf_otUS
SIMATIC NET PC Software V14all versionscisa_csaf_otUS
SIMATIC NET PC Software V15all versionscisa_csaf_otUS
SIMATIC PCS 7 V7.1 and earlierall versionscisa_csaf_otUS
SIMATIC PCS 7 V8.0all versionscisa_csaf_otUS
SIMATIC PCS 7 V8.1all versionscisa_csaf_otUS
SIMATIC PCS 7 V8.2all versionscisa_csaf_otUS
SIMATIC PCS 7 V9.0all versionscisa_csaf_otUS
SIMATIC Route Control V7.1 and earlierall versionscisa_csaf_otUS
SIMATIC Route Control V8.0all versionscisa_csaf_otUS
SIMATIC Route Control V8.1all versionscisa_csaf_otUS

showing 20 of 157

advisories (3)

Vendor and ecosystem advisories describing this.

SSA-348629SSA-348629: Denial-of-Service Vulnerability in SIMATIC PCS 7, SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC NET PC Software2018-03-27csaf · siemens_psirtDE
A Denial-of-Service vulnerability has been identified in SIMATIC PCS 7, SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC NET PC-Software. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures for products where updates are not, or not yet available.
ICSA-18-088-03Siemens SIMATIC PCS 7, SIMATIC WinCC, SIMATIC WinCC Runtime Professional, and SIMATIC NET PC Software (Update G)2018-03-27icsa · cisa_csaf_otUS
A Denial-of-Service vulnerability has been identified in SIMATIC PCS 7, SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC NET PC-Software. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures for products where updates are not, or not yet available.
ICSA-19-351-02Siemens SPPA-T3000 (Update A)2019-12-10icsa · cisa_csaf_otUS
SPPA-T3000 Application Server and MS3000 Migration Server are affected by multiple vulnerabilities. Some of the vulnerabilities can allow an attacker to execute arbitrary code on the server. Exploitation of the vulnerabilities described in this advisory requires access to either Application- or Automation Highway. Both highways should not be exposed if the environment has been set up according to the recommended system configuration in the SPPA-T3000 security manual. In this case Siemens Energy considers the environmental score as CR:L/IR:L/AR:H/MAV:A for vulnerabilities related to the Application Server and CR:L/IR:L/AR:M/MAV:A for vulnerabilities related to the Migration Server. Siemens Energy provides a service pack to fix vulnerabilities on the Application Server and recommends configurations to mitigate the vulnerabilities in the Migration Server. Detailed information will be available for SPPA-T3000 customers in the Siemens Energy Customer Portal (https://cep.siemens-energy.com/).

also known as (6)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot siemens_psirt NVD CVE.org MITRE

published 2018-04-24modified 2026-06-17

related (25,193)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2026-88771US	critical9.8OT critical	82.2% (100th)	KEV	2026-09-27
Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS,…
CVE-2026-93952US	—OT critical	1.38% (72nd)	KEV	2026-09-22
VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successf…
CVE-2026-12569US	critical9.8OT critical	46.0% (99th)	KEV	2026-06-18
A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of u…
CVE-2026-34910US	—OT critical	90.0% (100th)	KEV	2026-05-22
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.
CVE-2026-6973US	—OT critical	34.5% (98th)	KEV	2026-05-07
An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated user with administrative access to achieve remote code…

+25188 more

references (11)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan