References https://github.com/advisories/ghsa-q89m-g397-f55p https://nvd.nist.gov/vuln/detail/CVE-2010-2772 https://www.wired.com/2010/07/siemens-scada/ https://app.opencve.io/cve/?product=simatic_pcs_7&vendor=siemens https://vulnerability.circl.lu/vuln/CVE-2010-2772 https://www.cybersecurity-help.cz/vdb/SB2010072103 https://www.bitdefender.com/en-au/blog/hotforsecurity/five-severe-vulnerabilities-fixed-in-siemens-simatic-wincc-scada-system https://cert-portal.siemens.com/productcert/html/ssa-629254.html https://www.zero-day.cz/database/424/ https://exchange.xforce.ibmcloud.com/vulnerabilities/60587
Related VulnerabilitiesPoCCVE-2026-47717: FUXA 1.3.0 - Unauthenticated ICS/SCADA Project Data DisclosureSiemens SIMATIC HMI MiniWeb /FormLogin 默认口令漏洞(CVE-2025-13791)Scada-LTS Project Import组件Common.getHomeDir文件路径遍历漏洞(CVE-2025-13790)Scada-LTS 2.7.8.1跨站请求伪造漏洞(CVE-2025-8743)Scada-LTS Virtual Data Source Property Handler Name参数跨站脚本漏洞PoCCVE-2014-2908: Siemens SIMATIC S7-1200 CPU - Cross-Site ScriptingPoCCVE-2018-12634: CirCarLife Scada <4.3 - System Log ExposurePoCsiemens-simatic-default-login: Siemens SIMATIC HMI Miniweb - Default LoginPoChoneywell-scada-config: Honeywell Scada Configuration File - DetectPoCsimatic-dashboard-exposed: Siemens SIMATIC 300 Dashboard - ExposedPoCspidercontrol-scada-server-info: SpiderControl SCADA Web Server - Sensitive Information Exposure(CVE-2025-4822)ScadaWatt Otopilot SQL注入漏洞