Siemens Simatic Wincc Sm@rtclient — known CVE vulnerabilities

Every CVE whose affected-product data names Siemens Simatic Wincc Sm@rtclient, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2017-6870 — CVSS 7.4 (high): A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android (All versions before V1.0.2.2). The existing TLS protocol…
• CVE-2017-6871 — CVSS 5.4 (medium): A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android (All versions before V1.0.2.2) and SIMATIC WinCC…
• CVE-2014-5231 — CVSS 2.1 (low): The Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows physically proximate attackers to extract the password from storage…
• CVE-2015-5084 — CVSS 2.1 (low): The Siemens SIMATIC WinCC Sm@rtClient and Sm@rtClient Lite applications before 01.00.01.00 for Android do not properly store passwords…
• CVE-2014-5232 — CVSS 1.9 (low): The Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows local users to bypass an intended application-password requirement by…
• CVE-2014-5233 — CVSS 1.9 (low): The Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows physically proximate attackers to discover Sm@rtServer credentials by…