CVE-2024-30321

Severity: medium (CVSS 5.9 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-07-09 · updated 2026-06-17
Weakness: CWE-359

Description

A vulnerability has been identified in SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC WinCC Runtime Professional V18 (All versions < V18 Update 5), SIMATIC WinCC Runtime Professional V19 (All versions < V19 Update 2), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 23), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 17), SIMATIC WinCC V8.0 (All versions < V8.0 Update 5). The affected products do not properly handle certain requests to their web application, which may lead to the leak of privileged information. This could allow an unauthenticated remote attacker to retrieve information such as users and passwords.

Affected products

Siemens SIMATIC PCS 7: from 9.1 before 10 — fixed in 10
Siemens Simatic Wincc: from 7.4 before 7.4_sp1_update_23; from 7.5 before 7.5_sp2_update_17; from 8.0 before 8.0_update_5 — fixed in 7.4_sp1_update_23, 7.5_sp2_update_17, 8.0_update_5
Siemens AG SIMATIC WinCC Runtime Professional: from 18 before 19; from 19 before 19_update_2 — fixed in 19, 19_update_2

How to fix

Upgrade to a fixed version: Siemens SIMATIC PCS 7 10; Siemens Simatic Wincc 7.4_sp1_update_23, 7.5_sp2_update_17, 8.0_update_5; Siemens AG SIMATIC WinCC Runtime Professional 19, 19_update_2. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2024-30321 or the next vulnerability affects your stack