SIMATIC WinCC OA V3.18 vulnerabilities

3 known vulnerabilities in SIMATIC WinCC OA V3.18 from Siemens. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  CodeMeter: Least Privilege Violation

  CVE-2025-47809May 16, 2025Wibu

  Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation (before a logoff or reboot). For exploitation, there must have been an unprivileged installation with UAC, and the CodeMeter Control Center component must be insta

• 7.5 High severity

  SIMATIC BRAUMAT: Integer Overflow or Wraparound

  CVE-2023-28831Sep 12, 2023SiemensEPSS 1.13%

  The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to creat

• 9.8 Critical severity

  Cerberus DMS: Improper Authentication

  CVE-2022-33139Jun 21, 2022SiemensEPSS 1.29%

  A vulnerability has been identified in Cerberus DMS (All versions), Desigo CC (All versions), Desigo CC Compact (All versions), SIMATIC WinCC OA V3.16 (All versions in default configuration), SIMATIC WinCC OA V3.17 (All versions in non-default configuration),