CVE-2017-6867

A vulnerability was discovered in Siemens SIMATIC WinCC (V7.3 before Upd 11 and V7.4 before SP1), SIMATIC WinCC Runtime Professional (V13 before SP2 and V14 before SP1), SIMATIC WinCC (TIA Portal) Professional (V13 before SP2 and V14 before SP1) that could allow an authenticated, remote attacker who is member of the "administrators" group to crash services by sending specially crafted messages to the DCOM interface.

• CWE-787
• CWE-20

• http://www.securityfocus.com/bid/98368Third Party Advisory, VDB Entry
• https://cert-portal.siemens.com/productcert/pdf/ssa-523365.pdf
• https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-156872.pdfVendor Advisory
• http://www.securityfocus.com/bid/98368Third Party Advisory, VDB Entry
• https://cert-portal.siemens.com/productcert/pdf/ssa-523365.pdf
• https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-156872.pdfVendor Advisory

Published

May 11, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6851The jas_matrix_bindsub function in jas_seq.c in JasPer 2.0.1…
• CVE-2017-6852Heap-based buffer overflow in the jpc_dec_decodepkt function…
• CVE-2017-6862NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices…9.8
• CVE-2017-6864The integrated web server in Siemens RUGGEDCOM ROX I (all ve…
• CVE-2017-6865A vulnerability has been identified in Primary Setup Tool (P…
• CVE-2017-6866A vulnerability was discovered in Siemens XHQ server 4 and 5…
• CVE-2017-6868An Improper Authentication issue was discovered in Siemens S…
• CVE-2017-6869A vulnerability was discovered in Siemens ViewPort for Web O…
• CVE-2017-6870A vulnerability was discovered in Siemens SIMATIC WinCC Sm@r…
• CVE-2017-6871A vulnerability was discovered in Siemens SIMATIC WinCC Sm@r…
• CVE-2017-6872A vulnerability was discovered in Siemens OZW672 (all versio…
• CVE-2017-6873A vulnerability was discovered in Siemens OZW672 (all versio…