📦 Simatic Wincc

This is a critical path traversal vulnerability (CWE-22) in Siemens SIMATIC PCS 7 and WinCC systems that allows attackers to bypass directory restrictions and perform unauthorized file operations. Att...

This vulnerability allows authenticated attackers on affected Siemens SIMATIC PCS 7 and WinCC systems to obtain password hashes via a public API. Attackers can then brute-force these hashes to gain un...