Lucene search
K

EUVD-2020-28705

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType 
euvd
 euvd
🔗 euvd.enisa.europa.eu👁 3 Views

Vulnerability in multiple SIMATIC and SINAMICS software could allow arbitrary code execution.

Related
Affected
Refs
[
  {
    "enisaIdVendor": [
      {
        "id": "1136fb49-819c-3f69-88a7-1785f77a698d",
        "vendor": {
          "name": "Siemens"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "0f237301-c5dd-33ce-b584-d1ed7fb562ea",
        "product": {
          "name": "SIMATIC NET PC Software V15"
        },
        "product_version": "All versions"
      },
      {
        "id": "33449556-3615-3a2b-aebd-cea204774205",
        "product": {
          "name": "SIMATIC WinCC V7.4"
        },
        "product_version": "All versions < V7.4 SP1 Update 14"
      },
      {
        "id": "347f9fa6-5717-36c3-bd3f-6a3893d02b5c",
        "product": {
          "name": "SINUMERIK ONE virtual"
        },
        "product_version": "All Versions < V6.14"
      },
      {
        "id": "34b8bf55-761e-3e54-a5bb-efe7e1df2d3f",
        "product": {
          "name": "SIMATIC WinCC V7.5"
        },
        "product_version": "All versions < V7.5 SP1 Update 3"
      },
      {
        "id": "34f67aea-1af8-3c38-a324-a65db88d48d6",
        "product": {
          "name": "SIMATIC PCS neo"
        },
        "product_version": "All versions < V3.0 SP1"
      },
      {
        "id": "452f2684-e15c-3f85-850b-6f75e2508371",
        "product": {
          "name": "SIMATIC NET PC Software V16"
        },
        "product_version": "All versions < V16 Upd3"
      },
      {
        "id": "4a2864c0-f791-3892-9145-91c82f9b9db6",
        "product": {
          "name": "SINUMERIK Operate"
        },
        "product_version": "All Versions < V6.14"
      },
      {
        "id": "58a383bb-c589-3a20-9fd7-7af8a9876d33",
        "product": {
          "name": "SINEMA Server"
        },
        "product_version": "All versions < V14 SP3"
      },
      {
        "id": "6afbb0fb-91a3-3b7b-b9ae-f3d8a7355094",
        "product": {
          "name": "SIMATIC STEP 7 (TIA Portal) V16"
        },
        "product_version": "All versions < V16 Update 2"
      },
      {
        "id": "6c5943d9-9df4-3205-ae5a-558f2be82044",
        "product": {
          "name": "SIMATIC WinCC Runtime Professional V15"
        },
        "product_version": "All versions < V15.1 Update 5"
      },
      {
        "id": "7fae2638-7ba5-358b-80c3-05b7d1b05b61",
        "product": {
          "name": "SIMATIC STEP 7 V5"
        },
        "product_version": "All versions < V5.6 SP2 HF3"
      },
      {
        "id": "81a03a00-e21a-3985-90eb-5b896918e288",
        "product": {
          "name": "SIMATIC STEP 7 (TIA Portal) V14"
        },
        "product_version": "All versions < V14 SP1 Update 10"
      },
      {
        "id": "873efcae-20c0-3112-aed6-665a9f5b542c",
        "product": {
          "name": "SIMATIC WinCC Runtime Professional V16"
        },
        "product_version": "All versions < V16 Update 2"
      },
      {
        "id": "94393b56-cfc2-3a78-9d61-81442b9e9590",
        "product": {
          "name": "SIMATIC STEP 7 (TIA Portal) V13"
        },
        "product_version": "All versions < V13 SP2 Update 4"
      },
      {
        "id": "9e902a1a-7340-3bad-a46b-0ae925e20e28",
        "product": {
          "name": "SINAMICS STARTER"
        },
        "product_version": "All Versions < V5.4 HF2"
      },
      {
        "id": "b0edde6c-ab0b-3a81-b9e3-df1d55b6940a",
        "product": {
          "name": "SIMATIC NET PC Software V14"
        },
        "product_version": "All versions < V14 SP1 Update 14"
      },
      {
        "id": "b9a97ae7-5cc1-36f0-b0ad-1756f2deaf10",
        "product": {
          "name": "SIMATIC WinCC Runtime Professional V14"
        },
        "product_version": "All versions < V14 SP1 Update 10"
      },
      {
        "id": "bc1b5d34-8bfd-37ae-951b-e8d93e3c314b",
        "product": {
          "name": "SIMATIC WinCC Runtime Professional V13"
        },
        "product_version": "All versions < V13 SP2 Update 4"
      },
      {
        "id": "c663939e-9b5a-3d01-b202-ca845cc859ca",
        "product": {
          "name": "SIMATIC ProSave"
        },
        "product_version": "All versions < V17"
      },
      {
        "id": "d25ed5e6-56ff-3f57-808c-d1e000d71a20",
        "product": {
          "name": "SIMATIC WinCC Runtime Advanced"
        },
        "product_version": "All versions < V16 Update 2"
      },
      {
        "id": "daa55658-e272-3a05-9ebd-5b23411a13ae",
        "product": {
          "name": "SIMATIC STEP 7 (TIA Portal) V15"
        },
        "product_version": "All versions < V15.1 Update 5"
      },
      {
        "id": "de26ac10-490d-337c-a1aa-45538173a11c",
        "product": {
          "name": "SIMATIC WinCC OA V3.17"
        },
        "product_version": "All versions < V3.17 P003"
      },
      {
        "id": "df0b4bc1-0f36-387a-9e7a-993b72d20e8d",
        "product": {
          "name": "SINEC NMS"
        },
        "product_version": "All versions < V1.0 SP2"
      },
      {
        "id": "ea3fee12-e7b7-3419-b463-17d3d4c07017",
        "product": {
          "name": "SINAMICS Startdrive"
        },
        "product_version": "All Versions < V16 Update 3"
      },
      {
        "id": "eb2743b0-bb7a-3d0a-92aa-53967cd075c3",
        "product": {
          "name": "SIMATIC Automation Tool"
        },
        "product_version": "All versions < V4 SP2"
      },
      {
        "id": "fbbb7b8f-2556-3fe9-8787-635d8df3657e",
        "product": {
          "name": "SIMATIC S7-1500 Software Controller"
        },
        "product_version": "All versions < V21.8"
      },
      {
        "id": "ff1b9dea-98ec-31c1-8098-db33685b572a",
        "product": {
          "name": "SIMATIC WinCC OA V3.16"
        },
        "product_version": "All versions < V3.16 P018"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

07 Oct 2025 00:30Current
7High risk
Vulners AI Score7
CVSS 3.16.7
CVSS 27.2
EPSS0.00441
3