VULNERABILITY INTELLIGENCE
CVE-2013-0674
CVSS score6.8 MEDIUM
EPSS probability3.36%
CISA KEVNot currently listed
Published2013-03-21
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Buffer overflow in the RegReader ActiveX control in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote attackers to execute arbitrary code via a long parameter.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Primary references
- ics-cert@hq.dhs.gov — US Government Resource
- ics-cert@hq.dhs.gov — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory