SIMATIC WinCC OA V3.20 vulnerabilities

2 known vulnerabilities in SIMATIC WinCC OA V3.20 from Siemens. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Google Brotli Unchecked Return Value Exploited

  CVE-2026-111497Oct 22, 2026GoogleEPSS 82.6%

  A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a

• 8.2 High severity

  CodeMeter: Least Privilege Violation

  CVE-2025-47809May 16, 2025Wibu

  Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation (before a logoff or reboot). For exploitation, there must have been an unprivileged installation with UAC, and the CodeMeter Control Center component must be insta