Skip to content
Fencer Intel
medium 5.9

CVE-2024-30321 json

A vulnerability has been identified in SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC WinCC Runtime Professional V18 (All versi…

published 2y ago modified 4mo ago also EUVD-2024-28242

cvss
5.9
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.5%
EPSS 0.5% chance of exploitation in 30 days, percentile 44%
public exploits
0
none known

Summary

A vulnerability has been identified in SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC WinCC Runtime Professional V18 (All versions < V18 Update 5), SIMATIC WinCC Runtime Professional V19 (All versions < V19 Update 2), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 23), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 17), SIMATIC WinCC V8.0 (All versions < V8.0 Update 5). The affected products do not properly handle certain requests to their web application, which may lead to the leak of privileged information. This could allow an unauthenticated remote attacker to retrieve information such as users and passwords.

Patch / fix

  • Siemens SIMATIC PCS 7 V9.1 V9.1 SP2 UC05
  • Siemens SIMATIC WinCC Runtime Professional V18 V18 Update 5
  • Siemens SIMATIC WinCC Runtime Professional V19 V19 Update 2
  • Siemens SIMATIC WinCC V7.4 V7.4 SP1 Update 23
  • Siemens SIMATIC WinCC V7.5 V7.5 SP2 Update 17
  • Siemens SIMATIC WinCC V8.0 V8.0 Update 5
  • siemens simatic_pcs_7 10
  • siemens simatic_wincc 7.4_sp1_update_23, 7.5_sp2_update_17, 8.0_update_5
  • siemens simatic_wincc_runtime_professional 19, 19_update_2

Is CVE-2024-30321 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-24-193-16 updated cvss 5.9

Siemens SIMATIC WinCC

  • Siemens SIMATIC PCS 7 V9.1 <V9.1_SP2_UC05
    affected: fixed in V9.1, workaround support.industry.siemens.com
  • Siemens SIMATIC WinCC Runtime Professional V18 <V18_Update_5
    affected: fixed in V18, workaround
  • Siemens SIMATIC WinCC Runtime Professional V19 <V19_Update_2
    affected: fixed in V19, workaround
  • Siemens SIMATIC WinCC V7.4 <V7.4_SP1_Update_23
    affected: fixed in V7.4, workaround support.industry.siemens.com
  • Siemens SIMATIC WinCC V7.5 <V7.5_SP2_Update_17
    affected: fixed in V7.5, workaround support.industry.siemens.com
  • Siemens SIMATIC WinCC V8.0 <V8.0_Update_5
    affected: fixed in V8.0, workaround

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
2y ago

Exploit prediction

0.51% chance of exploitation in the next 30 days, higher than 44% of all scored CVEs (FIRST EPSS, 2026-11-11).

CVSS scores

assigned by version score vector
CNA 3.1 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CNA 4.0 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
CNA 4.0 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affected products

  • Siemens SIMATIC PCS 7 V9.1
  • Siemens SIMATIC WinCC Runtime Professional V18
  • Siemens SIMATIC WinCC Runtime Professional V19
  • Siemens SIMATIC WinCC V7.4
  • Siemens SIMATIC WinCC V7.5
  • Siemens SIMATIC WinCC V8.0
  • siemens simatic_pcs_7
  • siemens simatic_wincc
  • siemens simatic_wincc_runtime_professional

Classification

Weakness
  • CWE-359 Exposure of Private Personal Information to an Unauthorized Actor

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.