Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2023-30897

A vulnerability has been identified in SIMATIC WinCC (All versions < V7.5.2.13). Affected applications fail to set proper access rights for their installation folder if a non-default installation path was chosen during installation. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 18.5%
CVSS Severity
CVSS v3 Score 7.8
Products affected by CVE-2023-30897
  • Siemens » Wincc » Version: 5.0
    cpe:2.3:a:siemens:wincc:5.0
  • Siemens » Wincc » Version: 6.0
    cpe:2.3:a:siemens:wincc:6.0
  • Siemens » Wincc » Version: 7.0
    cpe:2.3:a:siemens:wincc:7.0
  • Siemens » Wincc » Version: 7.1
    cpe:2.3:a:siemens:wincc:7.1
  • Siemens » Wincc » Version: 7.2
    cpe:2.3:a:siemens:wincc:7.2
  • Siemens » Wincc » Version: 7.3
    cpe:2.3:a:siemens:wincc:7.3
  • Siemens » Wincc » Version: 7.4
    cpe:2.3:a:siemens:wincc:7.4


Products
Pricing
Contact Us

Shodan ® - All rights reserved