synced 3 MIN AGO
01 Record

CVE-2017-6865

A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC Automation Tool (All versions < V3.0), SIMATIC NET PC-Software (All versions < V14 SP1), SIMATIC PCS

UnratedPUBLISHEDCNA: siemens
CNA base scoreUnratedNo CNA CVSS vector

02 Description

A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC Automation Tool (All versions < V3.0), SIMATIC NET PC-Software (All versions < V14 SP1), SIMATIC PCS

03 Exploitation and scoring

Exploitation
Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision
Not assessed by CISA
EPSS probability
0.46% probability of exploitation activity in the next 30 days.
EPSS percentile
Equal to or higher than the score of 40.3% of scored records. A rank, not a probability.
NVD base score
6.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD analysis status
Modified. NVD last modified this record on 2026-06-17.
Red Hat severity
No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published
2017-05-11 10:00Z9 YR AGO
Last updated
2024-08-05 15:41Z2 YR AGO
Reserved
2017-03-13
Assigning CNA
siemens
Record state
PUBLISHED
Severity
Not rated by the issuing CNA
CNA CVSS vector
Not published by the issuing CNA
Weaknesses
  • CWE-20Improper Input ValidationClass
Data version
5.1
Document digest
3432c2f696860933009548c98e9a15e65031f05b2ff722c398a4a1496456b098

05 Affected products

VendorProductVersionsPlatforms
Siemens AGPrimary Setup Tool (PST)All versions < V4.2 HF1—
Siemens AGSIMATIC Automation ToolAll versions < V3.0—
Siemens AGSIMATIC NET PC-SoftwareAll versions < V14 SP1—
Siemens AGSIMATIC PCS 7 V8.1All versions—
Siemens AGSIMATIC PCS 7 V8.2All versions < V8.2 SP1—
Siemens AGSIMATIC STEP 7 (TIA Portal) V13All versions < V13 SP2—
Siemens AGSIMATIC STEP 7 (TIA Portal) V14All versions < V14 SP1—
Siemens AGSIMATIC STEP 7 V5.XAll versions < V5.6—
Siemens AGSIMATIC WinAC RTX 2010 SP2All versions—
Siemens AGSIMATIC WinAC RTX F 2010 SP2All versions—
Siemens AGSIMATIC WinCC (TIA Portal) V13All versions < V13 SP2—
Siemens AGSIMATIC WinCC (TIA Portal) V14All versions < V14 SP1—
Siemens AGSIMATIC WinCC V7.2 and priorAll versions—
Siemens AGSIMATIC WinCC V7.3All versions < V7.3 Update 15—
Siemens AGSIMATIC WinCC V7.4All versions < V7.4 SP1 Upd1—
Siemens AGSIMATIC WinCC flexible 2008All versions < flexible 2008 SP5—
Siemens AGSINAUT ST7CCAll versions installed in conjunction with SIMATIC WinCC < V7.3 Update 15—
Siemens AGSINEMA ServerAll versions < V14—
Siemens AGSINUMERIK 808D Programming ToolAll versions < V4.7 SP4 HF2—
Siemens AGSMART PC AccessAll versions < V2.3—
Siemens AGSTEP 7 - Micro/WIN SMARTAll versions < V2.3—
Siemens AGSecurity Configuration Tool (SCT)All versions < V5.0—

06 References