CVE-2023-28829

LowCVSS 3.9

Published: 13/06/2023(UTC)Updated: 23/10/2026(UTC)Translated: 24/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

21th percentile - higher than 21% of all known CVEs

Summary

A vulnerability affects SIMATIC NET PC Software, SIMATIC PCS 7, SIMATIC WinCC (< V8.0), and SINAUT Software ST7sc, which used legacy OPC DA, HDA, and AE services by default. These services, built on Windows ActiveX and DCOM, do not implement state-of-the-art authentication and encryption.

Risk Assessment

Lack of strong authentication and encryption may enable unauthorized access to and interception of process data. This increases confidentiality and integrity risk in industrial environments.

Recommendation

Plan migration to SIMATIC WinCC V8 or later, which do not use legacy OPC services by default. Until updated, restrict network access to OPC services and segment the network.

Other vulnerabilities in SIMATIC WinCC

CVE-2026-59241High
A vulnerability in SIMATIC WinCC V7.5, V8.0, and V8.1 is due to insufficient restriction of permissions assigned to a database role. An authenticated remote attacker with database access can escalate privileges and execute arbitrary commands on the host system where SIMATIC WinCC is installed, potentially leading to system compromise.

Original NVD description (English source)

A vulnerability has been identified in SIMATIC NET PC Software V14 (All versions), SIMATIC NET PC Software V15 (All versions), SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All versions), SIMATIC WinCC (All versions < V8.0), SINAUT Software ST7sc (All versions). Before SIMATIC WinCC V8, legacy OPC services (OPC DA (Data Access), OPC HDA (Historical Data Access), and OPC AE (Alarms & Events)) were used per default. These services were designed on top of the Windows ActiveX and DCOM mechanisms and do not implement state-of-the-art security mechanisms for authentication and encryption of contents.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS