CVE-2013-0674: Buffer overflow in the RegReader ActiveX control in Siemens WinCC before 7.2, as used in SIMATIC PCS7 befor...

Security readout for executives and security teams

This is a buffer overflow in a Siemens ActiveX control used by WinCC and SIMATIC PCS7. If reachable and triggered, it could let a remote attacker run code on affected engineering or operator systems. The bundle does not provide CVSS, detailed prerequisites, or evidence of active exploitation. Exposure is most likely where legacy Siemens WinCC before 7.2 or SIMATIC PCS7 before 8.0 SP1 remains installed. The source text also says other products may use the affected control, but this bundle does not enumerate them. Treat as a high-priority legacy ICS exposure if affected Siemens systems remain in production. The main business concern is code execution on control-system workstations, but urgency depends on whether vulnerable versions are still deployed and reachable. Mitigation focus: Upgrade WinCC to 7.2 or later if applicable.; Upgrade SIMATIC PCS7 to 8.0 SP1 or later if applicable.; Review Siemens advisory SSA-714398 for product-specific guidance..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.