CVE-2011-4513
Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible R...
Affects 5 products across 1 vendor.
CVE-2011-4513 affects multiple versions of Siemens WinCC and SIMATIC HMI panels, allowing remote attackers to execute arbitrary code through a crafted project file. The vulnerability has a CVSS score of 10.0, indicating critical severity. Immediate attention is required to mitigate potential risks to operational safety and system integrity.
BSID: BS-2012-GLOBAL-233576-C • Model: Qwen/Qwen2.5-72B-Instruct-AWQ • Confidence: HIGH
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2011-4513?
What is the CVSS score for CVE-2011-4513?
Is CVE-2011-4513 actively exploited?
How do I remediate CVE-2011-4513?
What systems are affected by CVE-2011-4513?
What NERC-CIP standard applies to CVE-2011-4513?
What IEC 62443 requirement maps to CVE-2011-4513?
| CVE ID | CVE-2011-4513 |
|---|---|
| BSID | BS-2012-GLOBAL-233576-C BreachSpider Global ID |
| CVSS Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
| Published | 2012-02-03 |
| Last Modified | 2026-06-16 |
| ICS Relevance | 65% |
| Verticals | |
| Source | NVD |
Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allow user-assisted remote attackers to execute arbitrary code via a crafted project file, related to the HMI web server and runtime loader.
Source: NIST NVD / MITRE CVE Database
The vulnerability can be exploited by an attacker who can persuade a user to open a specially crafted project file. This file can then leverage the HMI web server and runtime loader to execute arbitrary code on the affected systems. The attack vector is network-based and does not require authentication, making it highly accessible to remote attackers.
Exploitation Likelihood: MEDIUM
| Vendor | Product | Affected Versions |
|---|---|---|
| Siemens | WinCC Flexible | 2004 2005 2007 2008 |
| Siemens | WinCC | v11 |
| Siemens | SIMATIC Hmi Panels | comfort_panels mobile_panels mp op tp |
| Siemens | WinCC Runtime Advanced | v11 |
| Siemens | WinCC Flexible Runtime | All versions |
| CISA known-exploited | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
Implement strict file access controls and monitor for unusual activity in the HMI web server and runtime loader processes. Ensure that only trusted project files are opened and executed.
No reliable network detection signature exists for this vulnerability class — apply the compensating controls above and the vendor patch. A network rule is only drafted when a concrete on-the-wire signature can be grounded in the advisory.
This CVE violates CIP-007-R2 because it allows unauthorized access to electronic security perimeters, which could compromise the security of critical cyber assets.
This CVE maps to SR 7.6 as it involves the protection against unauthorized changes to software and configuration settings, which is essential for maintaining the integrity and security of industrial control systems.
Drafted by AI and not validated for your network. Test in an isolated environment before any production deployment. Compensating control only - does not replace vendor patch.
AI Enrichment Record — provenance & audit hash
| Model | Qwen/Qwen2.5-72B-Instruct-AWQ |
|---|---|
| Confidence | HIGH |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | ee3f70d57153869d6cdcbf410ec395f22676c88903d70096d70501cf7ed7093955be6ee841823a69b83c17f6bbdfecec6ca9a583e266809368dc02c9adc99f05 |
Critical Severity - Know Your Exposure
A CVSS 10.0 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.
Create a free account →