Siemens Simatic Wincc Oa — known CVE vulnerabilities

Every CVE whose affected-product data names Siemens Simatic Wincc Oa, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2021-20093 — CVSS 9.1 (critical): A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a. An unauthenticated remote attacker can exploit this…
• CVE-2019-6575 — CVSS 7.5 (high): A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl…
• CVE-2021-41057 — CVSS 7.1 (high): In WIBU CodeMeter Runtime before 7.30a, creating a crafted CmDongles symbolic link will overwrite the linked file without checking…
• CVE-2022-44731 — CVSS 5.4 (medium): A vulnerability has been identified in SIMATIC WinCC OA V3.15 (All versions < V3.15 P038), SIMATIC WinCC OA V3.16 (All versions < V3.16…