CVE-2017-6867: siemens simatic_wincc Out-of-bounds Write
Vulnerability summary
CVE-2017-6867 is a medium (CVSS 4.9) Out-of-bounds Write vulnerability in siemens simatic_wincc. EPSS estimates a 1.92% chance of exploitation in the next 30 days, higher than 79.5% of scored vulnerabilities.
Timeline
- 11-05-2017PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
A vulnerability was discovered in Siemens SIMATIC WinCC (V7.3 before Upd 11 and V7.4 before SP1), SIMATIC WinCC Runtime Professional (V13 before SP2 and V14 before SP1), SIMATIC WinCC (TIA Portal) Professional (V13 before SP2 and V14 before SP1) that could allow an authenticated, remote attacker who is member of the "administrators" group to crash services by sending specially crafted messages to the DCOM interface.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.92%
Chance of exploitation in the next 30 days
Percentile
80%
Versus all other CVEs
30-day change
0.00 pp
From 1.92% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.
- CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Affected systems
Siemens3 products
- simatic_wincc7.3 | 7.4
- simatic_wincc_runtime13:sp1 | 14
- simatic_wincc_\(tia_portal\)13:sp1 | 14
1 vendor · 3 products
References
3 links- cert-portal.siemens.com/productcert/pdf/ssa-523365.pdfX Refsource CONFIRM
- www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-156872.pdfX Refsource CONFIRMVendor Advisory