CVE-2022-24287 - CVE House
Back to Database
Status published High CVE-2022-24287

A vulnerability has been identified in SIMATIC PCS 7 V8.2...

Vulnerability Description

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC06), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1 UC01), SIMATIC WinCC Runtime Professional V16 and earlier (All versions), SIMATIC WinCC Runtime Professional V17 (All versions < V17 Upd4), SIMATIC WinCC V7.3 (All versions), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 21), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 8). A missing printer configuration on the host could allow an authenticated attacker to escape the WinCC Kiosk Mode.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-24287

Credits & Attribution

No credits recorded in the NVD database.

References

More from Siemens

View All →
CVE-2025-41224
A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All...
High 7.7
CVE-2025-41223
A vulnerability has been identified in RUGGEDCOM i800 (All versions),...
Medium 6.3
CVE-2025-41222
A vulnerability has been identified in RUGGEDCOM i800 (All versions),...
Medium 6.9
CVE-2025-40949
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All...
High 8.9
CVE-2025-40948
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All...
Medium 6.1

Affected Vendor

Affected Software

SIMATIC PCS 7 V8.2, SIMATIC PCS 7 V9.0, SIMATIC PCS 7 V9.1, SIMATIC WinCC Runtime Professional V16 and earlier, SIMATIC WinCC Runtime Professional V17, SIMATIC WinCC V7.3, SIMATIC WinCC V7.4, SIMATIC WinCC V7.5
Vulnerable Versions:
All versions, All versions < V9.0 SP3 UC06, All versions < V9.1 SP1 UC01, All versions < V17 Upd4, All versions < V7.4 SP1 Update 21, All versions < V7.5 SP2 Update 8

Timeline

Official Publish: May 10th, 2022
Last Modified: April 21st, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

Weaknesses (CWE)

CWE-1188

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.