Input Validation Flaw in SIMATIC PCS 7 and WinCC Runtime Products by Siemens
CVE-2023-50821
6.9MEDIUM
Key Information:
- Vendor
Siemens
- Status
- Vendor
- CVE Published:
- 9 April 2024
What is CVE-2023-50821?
An input validation flaw in various Siemens SIMATIC PCS 7 and WinCC Runtime products could be exploited by attackers. This vulnerability arises from improper handling of user inputs within the login dialog box, allowing for a potential persistent denial of service condition. Users are advised to review and update the affected products to mitigate the risk associated with this vulnerability.
Affected Version(s)
SIMATIC PCS 7 V9.1 0
SIMATIC WinCC Runtime Professional V17 0
SIMATIC WinCC Runtime Professional V18 0