CVE-2024-52051

highPriorität · verfolgen · 0EPSS 0.002 · 7. PerzentilDEEUNLRUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.18% (7th) EPSS

CVSS 7.3 · high

Is it mine?

199 products

Prüfe deine Angriffsfläche

Who says so?

7 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · bewertet 2026-10-27

A vulnerability has been identified in SIMATIC S7-PLCSIM V17 (All versions), SIMATIC S7-PLCSIM V18 (All versions), SIMATIC STEP 7 Safety V17 (All versions < V17 Update 9), SIMATIC STEP 7 Safety V18 (All versions < V18 Update 6), SIMATIC STEP 7 Safety V19 (All versions < V19 Update 4), SIMATIC STEP 7 V17 (All versions < V17 Update 9), SIMATIC STEP 7 V18 (All versions < V18 Update 6), SIMATIC STEP 7 V19 (All versions < V19 Update 4), SIMATIC WinCC Unified PC Runtime V18 (All versions), SIMATIC WinCC Unified PC Runtime V19 (All versions < V19 Update 4), SIMATIC WinCC Unified V17 (All versions < V17 Update 9), SIMATIC WinCC Unified V18 (All versions < V18 Update 6), SIMATIC WinCC Unified V19 (All versions < V19 Update 4), SIMATIC WinCC V17 (All versions < V17 Update 9), SIMATIC WinCC V18 (All versions < V18 Update 6), SIMATIC WinCC V19 (All versions < V19 Update 4), SIMOCODE ES V17 (All versions), SIMOCODE ES V18 (All versions), SIMOCODE ES V19 (All versions), SIMOTION SCOUT TIA V5.4 (All versions), SIMOTION SCOUT TIA V5.5 (All versions), SIMOTION SCOUT TIA V5.6 (All versions < V5.6 SP1 HF7), SINAMICS Startdrive V17 (All versions), SINAMICS Startdrive V18 (All versions), SINAMICS Startdrive V19 (All versions), SIRIUS Safety ES V17 (TIA Portal) (All versions), SIRIUS Safety ES V18 (TIA Portal) (All versions), SIRIUS Safety ES V19 (TIA Portal) (All versions), SIRIUS Soft Starter ES V17 (TIA Portal) (All versions), SIRIUS Soft Starter ES V18 (TIA Portal) (All versions), SIRIUS Soft Starter ES V19 (TIA Portal) (All versions), TIA Portal Cloud V17 (All versions), TIA Portal Cloud V18 (All versions), TIA Portal Cloud V19 (All versions < V5.2.1.1). The affected devices do not properly sanitize user-controllable input when parsing user settings. This could allow an attacker to locally execute arbitrary commands in the host operating system with the privileges of the user.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenSIMATIC STEP 7 Safety V17siemens_psirt
Update to V17 Update 9 or later version
https://support.industry.siemens.com/cs/ww/en/view/109784441/
BehobenSIMATIC STEP 7 Safety V18siemens_psirt
Update to V18 Update 6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817218/
BehobenSIMATIC STEP 7 Safety V19siemens_psirt
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/
BehobenSIMATIC STEP 7 V17siemens_psirt
Update to V17 Update 9 or later version
https://support.industry.siemens.com/cs/ww/en/view/109784441/
BehobenSIMATIC STEP 7 V18siemens_psirt
Update to V18 Update 6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817218/
BehobenSIMATIC STEP 7 V19siemens_psirt
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/
BehobenSIMATIC WinCC Unified PC Runtime V19siemens_psirt
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/
BehobenSIMATIC WinCC Unified V17siemens_psirt
Update to V17 Update 9 or later version
https://support.industry.siemens.com/cs/ww/en/view/109784441/
BehobenSIMATIC WinCC Unified V18siemens_psirt
Update to V18 Update 6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817218/
BehobenSIMATIC WinCC Unified V19siemens_psirt
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/
BehobenSIMATIC WinCC V17siemens_psirt
Update to V17 Update 9 or later version
https://support.industry.siemens.com/cs/ww/en/view/109784441/
BehobenSIMATIC WinCC V18siemens_psirt
Update to V18 Update 6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817218/
BehobenSIMATIC WinCC V19siemens_psirt
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/
BehobenSIMOTION SCOUT TIA V5.6siemens_psirt
Update to V5.6 SP1 HF7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989067/
BehobenTIA Portal Cloud V19siemens_psirt
TIA Portal Cloud V5.2.1.1 or later version updated TIA Portal to V19 Update 4 or later version
BehobenSIMATIC STEP 7 Safety V17cisa_csaf_ot
Update to V17 Update 9 or later version
https://support.industry.siemens.com/cs/ww/en/view/109784441/
BehobenSIMATIC STEP 7 Safety V19cisa_csaf_ot
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/
BehobenSIMATIC STEP 7 V17cisa_csaf_ot
Update to V17 Update 9 or later version
https://support.industry.siemens.com/cs/ww/en/view/109784441/
BehobenSIMATIC STEP 7 V19cisa_csaf_ot
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/
BehobenSIMATIC WinCC Unified PC Runtime V19cisa_csaf_ot
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/
BehobenSIMATIC WinCC Unified V17cisa_csaf_ot
Update to V17 Update 9 or later version
https://support.industry.siemens.com/cs/ww/en/view/109784441/
BehobenSIMATIC WinCC Unified V19cisa_csaf_ot
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/
BehobenSIMATIC WinCC V17cisa_csaf_ot
Update to V17 Update 9 or later version
https://support.industry.siemens.com/cs/ww/en/view/109784441/
BehobenSIMATIC WinCC V19cisa_csaf_ot
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/
BehobenSIMOTION SCOUT TIA V5.6cisa_csaf_ot
Update to V5.6 SP1 HF7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989067/
BehobenTIA Portal Cloud V19cisa_csaf_ot
TIA Portal Cloud V5.2.1.1 or later version updated TIA Portal to V19 Update 4 or later version
Kein Fix verfügbarSIMATIC WinCC Unified PC Runtime V18siemens_psirt
Currently no fix is available
Kein Fix verfügbarSIMOCODE ES V17siemens_psirt
Currently no fix is available
Kein Fix verfügbarSIMOCODE ES V18siemens_psirt
Currently no fix is available
Kein Fix verfügbarSIMOCODE ES V19siemens_psirt
Currently no fix is available
Kein Fix verfügbarSIMOTION SCOUT TIA V5.4siemens_psirt
Currently no fix is available
Kein Fix verfügbarSIMOTION SCOUT TIA V5.5siemens_psirt
Currently no fix is available
Kein Fix verfügbarSINAMICS Startdrive V17siemens_psirt
Currently no fix is available
Kein Fix verfügbarSINAMICS Startdrive V18siemens_psirt
Currently no fix is available
Kein Fix verfügbarSINAMICS Startdrive V19siemens_psirt
Currently no fix is available
Kein Fix verfügbarSIRIUS Safety ES V17 (TIA Portal)siemens_psirt
Currently no fix is available
Kein Fix verfügbarSIRIUS Safety ES V18 (TIA Portal)siemens_psirt
Currently no fix is available
Kein Fix verfügbarSIRIUS Safety ES V19 (TIA Portal)siemens_psirt
Currently no fix is available
Kein Fix verfügbarSIRIUS Soft Starter ES V17 (TIA Portal)siemens_psirt
Currently no fix is available
Kein Fix verfügbarSIRIUS Soft Starter ES V18 (TIA Portal)siemens_psirt
Currently no fix is available
Kein Fix verfügbarSIRIUS Soft Starter ES V19 (TIA Portal)siemens_psirt
Currently no fix is available
Kein Fix verfügbarTIA Portal Cloud V17siemens_psirt
Currently no fix is available
Kein Fix verfügbarTIA Portal Cloud V18siemens_psirt
Currently no fix is available
Kein Fix verfügbarSIMATIC S7-PLCSIM V17cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSIMATIC S7-PLCSIM V18cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSIMATIC STEP 7 Safety V18cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSIMATIC STEP 7 V18cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSIMATIC WinCC Unified PC Runtime V18cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSIMATIC WinCC Unified V18cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSIMATIC WinCC V18cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSIMOCODE ES V17cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSIMOCODE ES V18cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSIMOCODE ES V19cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSIMOTION SCOUT TIA V5.4cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSIMOTION SCOUT TIA V5.5cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSINAMICS Startdrive V17cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSINAMICS Startdrive V18cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSINAMICS Startdrive V19cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSIRIUS Safety ES V17 (TIA Portal)cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSIRIUS Safety ES V18 (TIA Portal)cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSIRIUS Safety ES V19 (TIA Portal)cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSIRIUS Soft Starter ES V17 (TIA Portal)cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSIRIUS Soft Starter ES V18 (TIA Portal)cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarSIRIUS Soft Starter ES V19 (TIA Portal)cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarTIA Portal Cloud V17cisa_csaf_ot
Currently no fix is available
Kein Fix verfügbarTIA Portal Cloud V18cisa_csaf_ot
Currently no fix is available
Kein Fix geplantSIMATIC S7-PLCSIM V17siemens_psirt
Currently no fix is planned
Kein Fix geplantSIMATIC S7-PLCSIM V18siemens_psirt
Currently no fix is planned

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.3

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 4–7.3

v3.17.3highCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:Hsecondary · productcert@siemens.com DEAusnutzbarkeit 1.3 · Auswirkung 5.9

v3.17.3highCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE

v3.17.3highAV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.17.3highCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · CISA US

v4.07highCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · productcert@siemens.com DE

v4.07highCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:Nsecondary · ENISA EU

v4.04mediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-20USCWE-20USCWE-20USCWE-20USCWE-20US

betroffene Produkte (199)

Betroffene Produkte und Versionsbereiche.

Siemens SIMATIC S7 V16alle Versionencert_bundDEcpe:/h:siemens:simatic_s7:v16
Siemens SIMATIC S7 V17alle Versionencert_bundDEcpe:/h:siemens:simatic_s7:v17
Siemens SIMATIC S7 V18alle Versionencert_bundDEcpe:/h:siemens:simatic_s7:v18
SIMATIC S7-PLCSIM V17alle Versionencisa_csaf_otUS
SIMATIC S7-PLCSIM V18alle Versionencisa_csaf_otUS
SIMATIC STEP 7 Safety V17alle Versionencisa_csaf_otUS
SIMATIC STEP 7 Safety V18alle Versionencisa_csaf_otUS
SIMATIC STEP 7 Safety V19alle Versionencisa_csaf_otUS
SIMATIC STEP 7 V17alle Versionencisa_csaf_otUS
SIMATIC STEP 7 V18alle Versionencisa_csaf_otUS
SIMATIC STEP 7 V19alle Versionencisa_csaf_otUS
SIMATIC WinCC Unified PC Runtime V18alle Versionencisa_csaf_otUS
SIMATIC WinCC Unified PC Runtime V19alle Versionencisa_csaf_otUS
SIMATIC WinCC Unified V17alle Versionencisa_csaf_otUS
SIMATIC WinCC Unified V18alle Versionencisa_csaf_otUS
SIMATIC WinCC Unified V19alle Versionencisa_csaf_otUS
SIMATIC WinCC V17alle Versionencisa_csaf_otUS
SIMATIC WinCC V18alle Versionencisa_csaf_otUS
SIMATIC WinCC V19alle Versionencisa_csaf_otUS
SIMOCODE ES V17alle Versionencisa_csaf_otUS

20 von 199 angezeigt

Advisories (4)

Hersteller- und Ökosystem-Meldungen dazu.

NCSC-2024-0473Kwetsbaarheden verholpen in Siemens productenNL2024-12-10csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als COMOS, RUGGEDCOM, SENTRON, SICAM, SIMATIC en TeamCenter.
SSA-392859SSA-392859: Local Arbitrary Code Execution Vulnerability in Siemens Engineering Platforms before V202024-12-10csaf · siemens_psirtDE
Affected products contain a local arbitrary code execution vulnerability that could allow an attacker to perform actions against the operation system of that environment. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available. Siemens has released products based on the Totally Integrated Automation Portal (TIA Portal) V20 which are not affected by CVE-2024-52051. See the chapter "Additional Information" below for more details.
WID-SEC-W-2024-3656Siemens SIMATIC S7: Mehrere Schwachstellen ermöglichen CodeausführungDeutsch2024-12-10csaf · cert_bundDE
Ein lokaler Angreifer kann mehrere Schwachstellen in Siemens SIMATIC S7 ausnutzen, um beliebigen Programmcode auszuführen.
ICSA-24-347-02Siemens Engineering Platforms2024-12-10icsa · cisa_csaf_otUS
Affected products contain a local arbitrary code execution vulnerability that could allow an attacker to perform actions against the operation system of that environment. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available. Siemens has released products based on the Totally Integrated Automation Portal (TIA Portal) V20 which are not affected by CVE-2024-52051. See the chapter "Additional Information" below for more details.

auch bekannt als (5)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cert_bund cisa_csaf_ot ncsc_nl siemens_psirt NVD CVE.org MITRE

veröffentlicht 2024-12-10geändert 2026-10-13

Referenzen (4)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan