VYPR
← All advisories
High severity7.8NVD Advisory· Published May 20, 2022· Updated Jun 17, 2026

CVE-2022-24287

CVE-2022-24287

Description

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC06), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1 UC01), SIMATIC WinCC Runtime Professional V16 and earlier (All versions), SIMATIC WinCC Runtime Professional V17 (All versions < V17 Upd4), SIMATIC WinCC V7.3 (All versions), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 21), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 8). A missing printer configuration on the host could allow an authenticated attacker to escape the WinCC Kiosk Mode.

Affected products

28
  • Siemens Foundation/Simatic Pcs76 versions
    cpe:2.3:a:siemens:simatic_pcs_7:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:siemens:simatic_pcs_7:*:*:*:*:*:*:*:*range: <=9.0
    • cpe:2.3:a:siemens:simatic_pcs_7:9.1:*:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: All versions
    • (no CPE)range: All versions < V9.0 SP3 UC06
    • (no CPE)range: All versions < V9.1 SP1 UC01
  • Siemens Foundation/Wincc16 versions
    cpe:2.3:a:siemens:simatic_wincc:*:*:*:*:*:*:*:*+ 15 more
    • cpe:2.3:a:siemens:simatic_wincc:*:*:*:*:*:*:*:*range: <=7.4
    • cpe:2.3:a:siemens:simatic_wincc:7.5:-:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.5:sp1:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.5:sp1_update1:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.5:sp1_update2:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.5:sp2:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update1:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update2:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update3:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update4:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update5:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update6:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update7:*:*:*:*:*:*
    • (no CPE)range: All versions
    • (no CPE)range: All versions < V7.4 SP1 Update 21
    • (no CPE)range: All versions < V7.5 SP2 Update 8
  • Siemens Foundation/Simatic Wincc Runtime Professional3 versions
    cpe:2.3:a:siemens:simatic_wincc_runtime_professional:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:siemens:simatic_wincc_runtime_professional:*:*:*:*:*:*:*:*range: <=16
    • cpe:2.3:a:siemens:simatic_wincc_runtime_professional:17:*:*:*:*:*:*:*
    • (no CPE)
  • Siemens Foundation/Simatic Wincc Oallm-fuzzy
  • Siemens Foundation/Simatic Wincc Runtimecpe-rescue2 versions
    All versions+ 1 more
    • (no CPE)range: All versions
    • (no CPE)range: All versions < V17 Upd4

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.