Wincc Open Architecture vulnerabilities

2 known vulnerabilities in Wincc Open Architecture from Siemens. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Cerberus DMS: Improper Authentication

  CVE-2022-33139Jun 21, 2022SiemensEPSS 1.29%

  A vulnerability has been identified in Cerberus DMS (All versions), Desigo CC (All versions), Desigo CC Compact (All versions), SIMATIC WinCC OA V3.16 (All versions in default configuration), SIMATIC WinCC OA V3.17 (All versions in non-default configuration),

• 7.5 High severity

  OpenSSL Information Disclosure Exploited

  CVE-2014-0160Apr 7, 2014OpenSSLEPSS 100%

  The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, a