June 13, 2023, midnight |

Siemens ProductCERT Security Advisories cert-portal.siemens.com

SIMATIC WinCC V7 is affected by a vulnerability that could allow a local attacker to inject arbitrary code and escalate privileges, if a non-default installation path was chosen during installation.


Siemens has released an update for SIMATIC WinCC and recommends to update to the latest version.

code code execution default inject installation latest local non path privileges siemens simatic ssa update version vulnerability

More from cert-portal.siemens.com / Siemens ProductCERT Security Advisories

Information Security Cyber Risk Analyst

@ Intel | USA - AZ - Chandler

Senior Cloud Security Engineer (Fullstack)

@ Grab | Petaling Jaya, Malaysia

Principal Product Security Engineer

@ Oracle | United States

Cybersecurity Strategy Director

@ Proofpoint | Sunnyvale, CA

Information Security Consultant/Auditor

@ Devoteam | Lisboa, Portugal

IT Security Engineer til Netcompany IT Services

@ Netcompany | Copenhagen, Denmark