SSA-493396

csafDEsiemens_psirt

SSA-493396: Deserialization Vulnerability in Siemens Engineering Platforms

Advisory ansehen veröffentlicht 2025-08-12

Affected products do not properly sanitize user-controllable input when parsing project files. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2025-40759US——
A vulnerability has been identified in SIMATIC S7-PLCSIM V17 (All versions), SIMATIC STEP 7 V17 (All versions < V17 Update 9), SIMATIC STEP 7 V18 (All versions), SIMATIC STEP 7 V19…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (66)

  • MitigationSIMATIC S7-PLCSIM V17

    Only open projects from trusted sources.

  • MitigationSIMATIC STEP 7 V17

    Only open projects from trusted sources.

  • MitigationSIMATIC STEP 7 V18

    Only open projects from trusted sources.

  • MitigationSIMATIC STEP 7 V19

    Only open projects from trusted sources.

  • MitigationSIMATIC STEP 7 V20

    Only open projects from trusted sources.

  • MitigationSIMATIC WinCC V17

    Only open projects from trusted sources.

  • MitigationSIMATIC WinCC V18

    Only open projects from trusted sources.

  • MitigationSIMATIC WinCC V19

    Only open projects from trusted sources.

  • MitigationSIMATIC WinCC V20

    Only open projects from trusted sources.

  • MitigationSIMOCODE ES V17

    Only open projects from trusted sources.

  • MitigationSIMOCODE ES V18

    Only open projects from trusted sources.

  • MitigationSIMOCODE ES V19

    Only open projects from trusted sources.

  • MitigationSIMOCODE ES V20

    Only open projects from trusted sources.

  • MitigationSIMOTION SCOUT TIA V5.4

    Only open projects from trusted sources.

  • MitigationSIMOTION SCOUT TIA V5.5

    Only open projects from trusted sources.

  • MitigationSIMOTION SCOUT TIA V5.6

    Only open projects from trusted sources.

  • MitigationSIMOTION SCOUT TIA V5.7

    Only open projects from trusted sources.

  • MitigationSINAMICS Startdrive V17

    Only open projects from trusted sources.

  • MitigationSINAMICS Startdrive V18

    Only open projects from trusted sources.

  • MitigationSINAMICS Startdrive V19

    Only open projects from trusted sources.

  • MitigationSINAMICS Startdrive V20

    Only open projects from trusted sources.

  • MitigationSIRIUS Safety ES V17 (TIA Portal)

    Only open projects from trusted sources.

  • MitigationSIRIUS Safety ES V18 (TIA Portal)

    Only open projects from trusted sources.

  • MitigationSIRIUS Safety ES V19 (TIA Portal)

    Only open projects from trusted sources.

  • MitigationSIRIUS Safety ES V20 (TIA Portal)

    Only open projects from trusted sources.

  • MitigationSIRIUS Soft Starter ES V17 (TIA Portal)

    Only open projects from trusted sources.

  • MitigationSIRIUS Soft Starter ES V18 (TIA Portal)

    Only open projects from trusted sources.

  • MitigationSIRIUS Soft Starter ES V19 (TIA Portal)

    Only open projects from trusted sources.

  • MitigationSIRIUS Soft Starter ES V20 (TIA Portal)

    Only open projects from trusted sources.

  • MitigationTIA Portal Cloud V17

    Only open projects from trusted sources.

  • MitigationTIA Portal Cloud V18

    Only open projects from trusted sources.

  • MitigationTIA Portal Cloud V19

    Only open projects from trusted sources.

  • MitigationTIA Portal Cloud V20

    Only open projects from trusted sources.

  • Kein Fix geplantSIMATIC S7-PLCSIM V17

    Currently no fix is planned

  • Kein Fix verfügbarSIMOCODE ES V17

    Currently no fix is available

  • Kein Fix verfügbarSIMOCODE ES V18

    Currently no fix is available

  • Kein Fix verfügbarSIMOCODE ES V19

    Currently no fix is available

  • Kein Fix verfügbarSIMOCODE ES V20

    Currently no fix is available

  • Kein Fix verfügbarSIMOTION SCOUT TIA V5.4

    Currently no fix is available

  • Kein Fix verfügbarSIMOTION SCOUT TIA V5.5

    Currently no fix is available

  • Kein Fix verfügbarSIMOTION SCOUT TIA V5.7

    Currently no fix is available

  • Kein Fix verfügbarSINAMICS Startdrive V17

    Currently no fix is available

  • Kein Fix verfügbarSINAMICS Startdrive V18

    Currently no fix is available

  • Kein Fix verfügbarSINAMICS Startdrive V19

    Currently no fix is available

  • Kein Fix verfügbarSINAMICS Startdrive V20

    Currently no fix is available

  • Kein Fix verfügbarSIRIUS Safety ES V17 (TIA Portal)

    Currently no fix is available

  • Kein Fix verfügbarSIRIUS Safety ES V18 (TIA Portal)

    Currently no fix is available

  • Kein Fix verfügbarSIRIUS Safety ES V19 (TIA Portal)

    Currently no fix is available

  • Kein Fix verfügbarSIRIUS Safety ES V20 (TIA Portal)

    Currently no fix is available

  • Kein Fix verfügbarSIRIUS Soft Starter ES V17 (TIA Portal)

    Currently no fix is available

  • Kein Fix verfügbarSIRIUS Soft Starter ES V18 (TIA Portal)

    Currently no fix is available

  • Kein Fix verfügbarSIRIUS Soft Starter ES V19 (TIA Portal)

    Currently no fix is available

  • Kein Fix verfügbarSIRIUS Soft Starter ES V20 (TIA Portal)

    Currently no fix is available

  • Kein Fix verfügbarTIA Portal Cloud V17

    Currently no fix is available

  • Kein Fix verfügbarTIA Portal Cloud V18

    Currently no fix is available

  • BehobenSIMATIC STEP 7 V17

    Update to V17 Update 9 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109784441/
  • BehobenSIMATIC STEP 7 V18

    Update to V18 Update 6 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109817218/
  • BehobenSIMATIC STEP 7 V19

    Update to V19 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109925643/
  • BehobenSIMATIC STEP 7 V20

    Update to V20 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109963851/
  • BehobenSIMATIC WinCC V17

    Update to V17 Update 9 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109784441/
  • BehobenSIMATIC WinCC V18

    Update to V18 Update 6 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109817218/
  • BehobenSIMATIC WinCC V19

    Update to V19 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109925643/
  • BehobenSIMATIC WinCC V20

    Update to V20 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109963851/
  • BehobenSIMOTION SCOUT TIA V5.6

    Update to V5.6 SP1 HF7 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109989067/
  • BehobenTIA Portal Cloud V19

    Fixed with V5.2.1.1, no user action required

  • BehobenTIA Portal Cloud V20

    Fixed with V5.2.2.2, no user action required

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan