CVE-2024-49849

highPriorität · verfolgen · 0EPSS 0.002 · 12. PerzentilDEEUNLRUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.22% (12th) EPSS

CVSS 7.8 · high

Is it mine?

227 products

Prüfe deine Angriffsfläche

Who says so?

7 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · bewertet 2026-10-27

A vulnerability has been identified in SIMATIC S7-PLCSIM V16 (All versions), SIMATIC S7-PLCSIM V17 (All versions), SIMATIC STEP 7 Safety V16 (All versions), SIMATIC STEP 7 Safety V17 (All versions < V17 Update 9), SIMATIC STEP 7 Safety V18 (All versions < V18 Update 6), SIMATIC STEP 7 Safety V19 (All versions < V19 Update 4), SIMATIC STEP 7 V16 (All versions), SIMATIC STEP 7 V17 (All versions < V17 Update 9), SIMATIC STEP 7 V18 (All versions < V18 Update 6), SIMATIC STEP 7 V19 (All versions < V19 Update 4), SIMATIC WinCC Unified V16 (All versions), SIMATIC WinCC Unified V17 (All versions < V17 Update 9), SIMATIC WinCC Unified V18 (All versions < V18 Update 6), SIMATIC WinCC Unified V19 (All versions < V19 Update 4), SIMATIC WinCC V16 (All versions), SIMATIC WinCC V17 (All versions < V17 Update 9), SIMATIC WinCC V18 (All versions < V18 Update 6), SIMATIC WinCC V19 (All versions < V19 Update 4), SIMOCODE ES V16 (All versions), SIMOCODE ES V17 (All versions), SIMOCODE ES V18 (All versions), SIMOCODE ES V19 (All versions), SIMOTION SCOUT TIA V5.4 (All versions), SIMOTION SCOUT TIA V5.5 (All versions), SIMOTION SCOUT TIA V5.6 (All versions < V5.6 SP1 HF7), SINAMICS Startdrive V16 (All versions), SINAMICS Startdrive V17 (All versions), SINAMICS Startdrive V18 (All versions), SINAMICS Startdrive V19 (All versions), SIRIUS Safety ES V17 (TIA Portal) (All versions), SIRIUS Safety ES V18 (TIA Portal) (All versions < V18 Update 6), SIRIUS Safety ES V19 (TIA Portal) (All versions), SIRIUS Soft Starter ES V17 (TIA Portal) (All versions), SIRIUS Soft Starter ES V18 (TIA Portal) (All versions), SIRIUS Soft Starter ES V19 (TIA Portal) (All versions), TIA Portal Cloud V16 (All versions), TIA Portal Cloud V17 (All versions), TIA Portal Cloud V18 (All versions < V6.3.0.2), TIA Portal Cloud V19 (All versions < V5.2.1.1). Affected products do not properly sanitize user-controllable input when parsing log files. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenSIMATIC STEP 7 Safety V17siemens_psirt
Update to V17 Update 9 or later version
https://support.industry.siemens.com/cs/ww/en/view/109784441/
BehobenSIMATIC STEP 7 Safety V18siemens_psirt
Update to V18 Update 6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817218/
BehobenSIMATIC STEP 7 Safety V19siemens_psirt
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/
BehobenSIMATIC STEP 7 V17siemens_psirt
Update to V17 Update 9 or later version
https://support.industry.siemens.com/cs/ww/en/view/109784441/
BehobenSIMATIC STEP 7 V18siemens_psirt
Update to V18 Update 6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817218/
BehobenSIMATIC STEP 7 V19siemens_psirt
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/
BehobenSIMATIC WinCC Unified V17siemens_psirt
Update to V17 Update 9 or later version
https://support.industry.siemens.com/cs/ww/en/view/109784441/
BehobenSIMATIC WinCC Unified V18siemens_psirt
Update to V18 Update 6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817218/
BehobenSIMATIC WinCC Unified V19siemens_psirt
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/
BehobenSIMATIC WinCC V17siemens_psirt
Update to V17 Update 9 or later version
https://support.industry.siemens.com/cs/ww/en/view/109784441/
BehobenSIMATIC WinCC V18siemens_psirt
Update to V18 Update 6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817218/
BehobenSIMATIC WinCC V19siemens_psirt
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/
BehobenSIMOTION SCOUT TIA V5.6siemens_psirt
Update to V5.6 SP1 HF7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989067/
BehobenSIRIUS Safety ES V18 (TIA Portal)siemens_psirt
Update to V18 Update 6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817575/
BehobenTIA Portal Cloud V18siemens_psirt
Update to V6.3.0.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109794456/
BehobenTIA Portal Cloud V19siemens_psirt
TIA Portal Cloud V5.2.1.1 or later version updated TIA Portal to V19 Update 4 or later version
BehobenSIMATIC STEP 7 Safety V19cisa_csaf_ot
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/
BehobenSIMATIC STEP 7 V19cisa_csaf_ot
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/
BehobenSIMATIC WinCC Unified V19cisa_csaf_ot
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/
BehobenSIMATIC WinCC V19cisa_csaf_ot
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/
BehobenSIMOTION SCOUT TIA V5.6cisa_csaf_ot
Update to V5.6 SP1 HF7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989067/
BehobenTIA Portal Cloud V19cisa_csaf_ot
TIA Portal Cloud V5.2.1.1 or later version updated TIA Portal to V19 Update 4 or later version
MitigationSIMATIC S7-PLCSIM V16siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC S7-PLCSIM V17siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC STEP 7 Safety V16siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC STEP 7 Safety V17siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC STEP 7 Safety V18siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC STEP 7 Safety V19siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC STEP 7 V16siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC STEP 7 V17siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC STEP 7 V18siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC STEP 7 V19siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC WinCC Unified V16siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC WinCC Unified V17siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC WinCC Unified V18siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC WinCC Unified V19siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC WinCC V16siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC WinCC V17siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC WinCC V18siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC WinCC V19siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMOCODE ES V16siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMOCODE ES V17siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMOCODE ES V18siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMOCODE ES V19siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMOTION SCOUT TIA V5.4siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMOTION SCOUT TIA V5.5siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMOTION SCOUT TIA V5.6siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSINAMICS Startdrive V16siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSINAMICS Startdrive V17siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSINAMICS Startdrive V18siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSINAMICS Startdrive V19siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIRIUS Safety ES V17 (TIA Portal)siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIRIUS Safety ES V18 (TIA Portal)siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIRIUS Safety ES V19 (TIA Portal)siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIRIUS Soft Starter ES V17 (TIA Portal)siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIRIUS Soft Starter ES V18 (TIA Portal)siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIRIUS Soft Starter ES V19 (TIA Portal)siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationTIA Portal Cloud V16siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationTIA Portal Cloud V17siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationTIA Portal Cloud V18siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationTIA Portal Cloud V19siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC S7-PLCSIM V16cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC S7-PLCSIM V17cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC STEP 7 Safety V16cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC STEP 7 Safety V17cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC STEP 7 Safety V18cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC STEP 7 Safety V19cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC STEP 7 V16cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC STEP 7 V17cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC STEP 7 V18cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC STEP 7 V19cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC WinCC Unified V16cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC WinCC Unified V17cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC WinCC Unified V18cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC WinCC Unified V19cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC WinCC V16cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC WinCC V17cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC WinCC V18cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC WinCC V19cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMOCODE ES V16cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMOCODE ES V17cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMOCODE ES V18cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMOCODE ES V19cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMOTION SCOUT TIA V5.4cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMOTION SCOUT TIA V5.5cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMOTION SCOUT TIA V5.6cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSINAMICS Startdrive V16cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSINAMICS Startdrive V17cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSINAMICS Startdrive V18cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSINAMICS Startdrive V19cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIRIUS Safety ES V17 (TIA Portal)cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIRIUS Safety ES V18 (TIA Portal)cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIRIUS Safety ES V19 (TIA Portal)cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIRIUS Soft Starter ES V17 (TIA Portal)cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIRIUS Soft Starter ES V18 (TIA Portal)cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIRIUS Soft Starter ES V19 (TIA Portal)cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationTIA Portal Cloud V16cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationTIA Portal Cloud V17cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationTIA Portal Cloud V18cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationTIA Portal Cloud V19cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
Kein Fix verfügbarSIMOCODE ES V17siemens_psirt
Currently no fix is available
Kein Fix verfügbarSIMOCODE ES V18siemens_psirt
Currently no fix is available
Kein Fix verfügbarSIMOCODE ES V19siemens_psirt
Currently no fix is available
Kein Fix verfügbarSIMOTION SCOUT TIA V5.4siemens_psirt
Currently no fix is available
Kein Fix verfügbarSIMOTION SCOUT TIA V5.5siemens_psirt
Currently no fix is available
Kein Fix verfügbarSINAMICS Startdrive V17siemens_psirt
Currently no fix is available
Kein Fix verfügbarSINAMICS Startdrive V18siemens_psirt
Currently no fix is available
Kein Fix verfügbarSINAMICS Startdrive V19siemens_psirt
Currently no fix is available
Kein Fix verfügbarSIRIUS Safety ES V17 (TIA Portal)siemens_psirt
Currently no fix is available
Kein Fix verfügbarSIRIUS Safety ES V19 (TIA Portal)siemens_psirt
Currently no fix is available
Kein Fix verfügbarSIRIUS Soft Starter ES V17 (TIA Portal)siemens_psirt
Currently no fix is available
Kein Fix verfügbarSIRIUS Soft Starter ES V18 (TIA Portal)siemens_psirt
Currently no fix is available
Kein Fix verfügbarSIRIUS Soft Starter ES V19 (TIA Portal)siemens_psirt
Currently no fix is available
Kein Fix verfügbarTIA Portal Cloud V17siemens_psirt
Currently no fix is available
Kein Fix verfügbarSIMATIC STEP 7 Safety V17cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSIMATIC STEP 7 Safety V18cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSIMATIC STEP 7 V17cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSIMATIC STEP 7 V18cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSIMATIC WinCC Unified V17cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSIMATIC WinCC Unified V18cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSIMATIC WinCC V17cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSIMATIC WinCC V18cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSIMOCODE ES V17cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSIMOCODE ES V18cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSIMOCODE ES V19cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSIMOTION SCOUT TIA V5.4cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSIMOTION SCOUT TIA V5.5cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSINAMICS Startdrive V17cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSINAMICS Startdrive V18cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSINAMICS Startdrive V19cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSIRIUS Safety ES V17 (TIA Portal)cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSIRIUS Safety ES V18 (TIA Portal)cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSIRIUS Safety ES V19 (TIA Portal)cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSIRIUS Soft Starter ES V17 (TIA Portal)cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSIRIUS Soft Starter ES V18 (TIA Portal)cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSIRIUS Soft Starter ES V19 (TIA Portal)cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarTIA Portal Cloud V17cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarTIA Portal Cloud V18cisa_csaf_ot
Currently no fix is available
Kein Fix geplantSIMATIC S7-PLCSIM V16siemens_psirt
Currently no fix is planned
Kein Fix geplantSIMATIC S7-PLCSIM V17siemens_psirt
Currently no fix is planned
Kein Fix geplantSIMATIC STEP 7 Safety V16siemens_psirt
Currently no fix is planned
Kein Fix geplantSIMATIC STEP 7 V16siemens_psirt
Currently no fix is planned
Kein Fix geplantSIMATIC WinCC Unified V16siemens_psirt
Currently no fix is planned
Kein Fix geplantSIMATIC WinCC V16siemens_psirt
Currently no fix is planned
Kein Fix geplantSIMOCODE ES V16siemens_psirt
Currently no fix is planned
Kein Fix geplantSINAMICS Startdrive V16siemens_psirt
Currently no fix is planned
Kein Fix geplantTIA Portal Cloud V16siemens_psirt
Currently no fix is planned
Kein Fix geplantSIMATIC S7-PLCSIM V16cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIMATIC S7-PLCSIM V17cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIMATIC STEP 7 Safety V16cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIMATIC STEP 7 V16cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIMATIC WinCC Unified V16cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIMATIC WinCC V16cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIMOCODE ES V16cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSINAMICS Startdrive V16cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantTIA Portal Cloud V16cisa_csaf_ot
Currently no fix is planned

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

8.4

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5.7–8.4

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · productcert@siemens.com DEAusnutzbarkeit 1.8 · Auswirkung 5.9

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE

v3.17.8highAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · CISA US

v4.08.4highCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · productcert@siemens.com DE

v4.08.4highCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:Nsecondary · ENISA EU

v4.05.7mediumCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-502USCWE-502USCWE-502USCWE-502USCWE-502US

betroffene Produkte (227)

Betroffene Produkte und Versionsbereiche.

Siemens SIMATIC S7 V16alle Versionencert_bundDEcpe:/h:siemens:simatic_s7:v16
Siemens SIMATIC S7 V17alle Versionencert_bundDEcpe:/h:siemens:simatic_s7:v17
Siemens SIMATIC S7 V18alle Versionencert_bundDEcpe:/h:siemens:simatic_s7:v18
SIMATIC S7-PLCSIM V16alle Versionencisa_csaf_otUS
SIMATIC S7-PLCSIM V17alle Versionencisa_csaf_otUS
SIMATIC STEP 7 Safety V16alle Versionencisa_csaf_otUS
SIMATIC STEP 7 Safety V17alle Versionencisa_csaf_otUS
SIMATIC STEP 7 Safety V18alle Versionencisa_csaf_otUS
SIMATIC STEP 7 Safety V19alle Versionencisa_csaf_otUS
SIMATIC STEP 7 V16alle Versionencisa_csaf_otUS
SIMATIC STEP 7 V17alle Versionencisa_csaf_otUS
SIMATIC STEP 7 V18alle Versionencisa_csaf_otUS
SIMATIC STEP 7 V19alle Versionencisa_csaf_otUS
SIMATIC WinCC Unified V16alle Versionencisa_csaf_otUS
SIMATIC WinCC Unified V17alle Versionencisa_csaf_otUS
SIMATIC WinCC Unified V18alle Versionencisa_csaf_otUS
SIMATIC WinCC Unified V19alle Versionencisa_csaf_otUS
SIMATIC WinCC V16alle Versionencisa_csaf_otUS
SIMATIC WinCC V17alle Versionencisa_csaf_otUS
SIMATIC WinCC V18alle Versionencisa_csaf_otUS

20 von 227 angezeigt

Advisories (4)

Hersteller- und Ökosystem-Meldungen dazu.

NCSC-2024-0473Kwetsbaarheden verholpen in Siemens productenNL2024-12-10csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als COMOS, RUGGEDCOM, SENTRON, SICAM, SIMATIC en TeamCenter.
SSA-800126SSA-800126: Deserialization Vulnerability in Siemens Engineering Platforms before V202024-12-10csaf · siemens_psirtDE
Affected products do not properly sanitize user-controllable input when parsing files. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available. Siemens has released products based on the Totally Integrated Automation Portal (TIA Portal) V20 which are not affected by CVE-2024-49849. See the chapter "Additional Information" below for more details.
WID-SEC-W-2024-3656Siemens SIMATIC S7: Mehrere Schwachstellen ermöglichen CodeausführungDeutsch2024-12-10csaf · cert_bundDE
Ein lokaler Angreifer kann mehrere Schwachstellen in Siemens SIMATIC S7 ausnutzen, um beliebigen Programmcode auszuführen.
ICSA-24-347-05Siemens Siemens Engineering Platforms2024-12-10icsa · cisa_csaf_otUS
Affected products do not properly sanitize user-controllable input when parsing files. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available. Siemens has released products based on the Totally Integrated Automation Portal (TIA Portal) V20 which are not affected by CVE-2024-49849. See the chapter "Additional Information" below for more details.

auch bekannt als (5)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cert_bund cisa_csaf_ot ncsc_nl siemens_psirt NVD CVE.org MITRE

veröffentlicht 2024-12-10geändert 2026-10-13

Referenzen (5)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan