ICSA-24-347-02

Siemens Engineering Platforms

view advisory published 2024-12-10

Affected products contain a local arbitrary code execution vulnerability that could allow an attacker to perform actions against the operation system of that environment. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available. Siemens has released products based on the Totally Integrated Automation Portal (TIA Portal) V20 which are not affected by CVE-2024-52051. See the chapter "Additional Information" below for more details.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-52051US	—	0.18% (7th)	—	2024-12-10
A vulnerability has been identified in SIMATIC S7-PLCSIM V17 (All versions), SIMATIC S7-PLCSIM V18 (All versions), SIMATIC STEP 7 Safety V17 (All versions < V17 Update 9), SIMATIC…

references

External citations — patches, advisories, analysis.

remediations (34)

No fix availableSIMATIC S7-PLCSIM V17
Currently no fix is available
No fix availableSIMATIC S7-PLCSIM V18
Currently no fix is available
No fix availableSIMATIC STEP 7 Safety V18
Currently no fix is available
No fix availableSIMATIC STEP 7 V18
Currently no fix is available
No fix availableSIMATIC WinCC Unified PC Runtime V18
Currently no fix is available
No fix availableSIMATIC WinCC Unified V18
Currently no fix is available
No fix availableSIMATIC WinCC V18
Currently no fix is available
No fix availableSIMOCODE ES V17
Currently no fix is available
No fix availableSIMOCODE ES V18
Currently no fix is available
No fix availableSIMOCODE ES V19
Currently no fix is available
No fix availableSIMOTION SCOUT TIA V5.4
Currently no fix is available
No fix availableSIMOTION SCOUT TIA V5.5
Currently no fix is available
No fix availableSINAMICS Startdrive V17
Currently no fix is available
No fix availableSINAMICS Startdrive V18
Currently no fix is available
No fix availableSINAMICS Startdrive V19
Currently no fix is available
No fix availableSIRIUS Safety ES V17 (TIA Portal)
Currently no fix is available
No fix availableSIRIUS Safety ES V18 (TIA Portal)
Currently no fix is available
No fix availableSIRIUS Safety ES V19 (TIA Portal)
Currently no fix is available
No fix availableSIRIUS Soft Starter ES V17 (TIA Portal)
Currently no fix is available
No fix availableSIRIUS Soft Starter ES V18 (TIA Portal)
Currently no fix is available
No fix availableSIRIUS Soft Starter ES V19 (TIA Portal)
Currently no fix is available
No fix availableTIA Portal Cloud V17
Currently no fix is available
No fix availableTIA Portal Cloud V18
Currently no fix is available
FixedSIMATIC STEP 7 Safety V17
Update to V17 Update 9 or later version
https://support.industry.siemens.com/cs/ww/en/view/109784441/
FixedSIMATIC STEP 7 Safety V19
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/
FixedSIMATIC STEP 7 V17
Update to V17 Update 9 or later version
https://support.industry.siemens.com/cs/ww/en/view/109784441/
FixedSIMATIC STEP 7 V19
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/
FixedSIMATIC WinCC Unified PC Runtime V19
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/
FixedSIMATIC WinCC Unified V17
Update to V17 Update 9 or later version
https://support.industry.siemens.com/cs/ww/en/view/109784441/
FixedSIMATIC WinCC Unified V19
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/
FixedSIMATIC WinCC V17
Update to V17 Update 9 or later version
https://support.industry.siemens.com/cs/ww/en/view/109784441/
FixedSIMATIC WinCC V19
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/
FixedSIMOTION SCOUT TIA V5.6
Update to V5.6 SP1 HF7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989067/
FixedTIA Portal Cloud V19
TIA Portal Cloud V5.2.1.1 or later version updated TIA Portal to V19 Update 4 or later version

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan