← Back to home
ICSA-16-161-02  ·  Published 2025-06-09  ·  View on CISA ICS-CERT ↗

Siemens SIMATIC WinCC Flexible Weakly Protected Credentials Vulnerability

CVSS 3.7 LOW

CVEs (1)

Remediations

  • Siemens provides Update 7 for SIMATIC WinCC flexible 2008 SP3, which fixes the vulnerability, and recommends users to update to the new version. Update 7 can be found at the following location on the Siemens web site: (https://support.industry.siemens.com/cs/ww/en/view/58860033)
  • For more information on this vulnerability and more detailed mitigation instructions, please see Siemens Security Advisory SSA-526760 at the following location: (http://www.siemens.com/cert/en/cert-security-advisories.htm)

Affected Vendors

Siemens

Affected Products (1)

Siemens · SIMATIC WinCC flexible <=SP3_Up7

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more