CVE-2024-54678

highPriorität · verfolgen · 0EPSS 0.002 · 6. PerzentilDEEUNLRUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
0.17% (6th) EPSS
CVSS 8.2 · high
Is it mine?
464 products
Prüfe deine Angriffsfläche
Who says so?
7 sources
cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · bewertet 2026-10-22

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), SIMATIC S7-PLCSIM V17 (All versions), SIMATIC STEP 7 V17 (All versions < V17 Update 9), SIMATIC STEP 7 V18 (All versions < V18 Update 6), SIMATIC STEP 7 V19 (All versions < V19 Update 4), SIMATIC STEP 7 V20 (All versions < V20 Update 4), SIMATIC WinCC V17 (All versions < V17 Update 9), SIMATIC WinCC V18 (All versions < V18 Update 6), SIMATIC WinCC V19 (All versions < V19 Update 4), SIMATIC WinCC V20 (All versions < V20 Update 4), SIMOCODE ES V17 (All versions), SIMOCODE ES V18 (All versions), SIMOCODE ES V19 (All versions), SIMOCODE ES V20 (All versions), SIMOTION SCOUT TIA V5.4 (All versions), SIMOTION SCOUT TIA V5.5 (All versions), SIMOTION SCOUT TIA V5.6 (All versions < V5.6 SP1 HF7), SIMOTION SCOUT TIA V5.7 (All versions), SINAMICS Startdrive V17 (All versions), SINAMICS Startdrive V18 (All versions), SINAMICS Startdrive V19 (All versions), SINAMICS Startdrive V20 (All versions), SIRIUS Safety ES V17 (TIA Portal) (All versions), SIRIUS Safety ES V18 (TIA Portal) (All versions), SIRIUS Safety ES V19 (TIA Portal) (All versions), SIRIUS Safety ES V20 (TIA Portal) (All versions), SIRIUS Soft Starter ES V17 (TIA Portal) (All versions), SIRIUS Soft Starter ES V18 (TIA Portal) (All versions), SIRIUS Soft Starter ES V19 (TIA Portal) (All versions), SIRIUS Soft Starter ES V20 (TIA Portal) (All versions), TIA Portal Cloud V17 (All versions), TIA Portal Cloud V18 (All versions < V6.3.0.2), TIA Portal Cloud V19 (All versions < V5.2.1.1), TIA Portal Cloud V20 (All versions < V5.2.2.2), TIA Portal Test Suite V20 (All versions < V20 Update 4). Affected products do not properly sanitize Interprocess Communication input received through a Windows Named Pipe accessible to all local users. This could allow an authenticated local attacker to cause a type confusion and execute arbitrary code within the affected application.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • BehobenSIMATIC PCS neo V6.0siemens_psirt

    Update to V6.0 SP1 Update 1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/110000357/
  • BehobenSIMATIC STEP 7 V17siemens_psirt

    Update to V17 Update 9 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109784441/
  • BehobenSIMATIC STEP 7 V18siemens_psirt

    Update to V18 Update 6 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109817218/
  • BehobenSIMATIC STEP 7 V19siemens_psirt

    Update to V19 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109925643/
  • BehobenSIMATIC STEP 7 V20siemens_psirt

    Update to V20 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109963851/
  • BehobenSIMATIC WinCC V17siemens_psirt

    Update to V17 Update 9 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109784441/
  • BehobenSIMATIC WinCC V18siemens_psirt

    Update to V18 Update 6 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109817218/
  • BehobenSIMATIC WinCC V19siemens_psirt

    Update to V19 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109925643/
  • BehobenSIMATIC WinCC V20siemens_psirt

    Update to V20 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109963851/
  • BehobenSIMOCODE ES V18siemens_psirt

    https://support.industry.siemens.com/cs/ww/en/view/109817218/

  • BehobenSIMOTION SCOUT TIA V5.4siemens_psirt

    https://support.industry.siemens.com/cs/ww/en/view/109784441/

  • BehobenSIMOTION SCOUT TIA V5.5siemens_psirt

    https://support.industry.siemens.com/cs/ww/en/view/109817218/

  • BehobenSIMOTION SCOUT TIA V5.6siemens_psirt

    Update to V5.6 SP1 HF7 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109989067/
  • BehobenSINAMICS Startdrive V17siemens_psirt

    https://support.industry.siemens.com/cs/ww/en/view/109784441/

  • BehobenSINAMICS Startdrive V18siemens_psirt

    https://support.industry.siemens.com/cs/ww/en/view/109817218/

  • BehobenSIRIUS Safety ES V18 (TIA Portal)siemens_psirt

    https://support.industry.siemens.com/cs/ww/en/view/109817218/

  • BehobenSIRIUS Soft Starter ES V18 (TIA Portal)siemens_psirt

    https://support.industry.siemens.com/cs/ww/en/view/109817218/

  • BehobenTIA Portal Cloud V18siemens_psirt

    Update to V6.3.0.2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109794456/
  • BehobenTIA Portal Cloud V19siemens_psirt

    Fixed with V5.2.1.1, no user action required

  • BehobenTIA Portal Cloud V20siemens_psirt

    Fixed with V5.2.2.2, no user action required

  • BehobenTIA Portal Test Suite V20siemens_psirt

    Update to V20 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109963851/
  • BehobenSIMATIC PCS neo V6.0cisa_csaf_ot

    Update to V6.0 SP1 Update 1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/110000357/
  • BehobenSIMATIC STEP 7 V17cisa_csaf_ot

    Update to V17 Update 9 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109784441/
  • BehobenSIMATIC STEP 7 V19cisa_csaf_ot

    Update to V19 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109925643/
  • BehobenSIMATIC STEP 7 V20cisa_csaf_ot

    Update to V20 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109963851/
  • BehobenSIMATIC WinCC V17cisa_csaf_ot

    Update to V17 Update 9 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109784441/
  • BehobenSIMATIC WinCC V19cisa_csaf_ot

    Update to V19 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109925643/
  • BehobenSIMATIC WinCC V20cisa_csaf_ot

    Update to V20 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109963851/
  • BehobenSIMOCODE ES V18cisa_csaf_ot

    https://support.industry.siemens.com/cs/ww/en/view/109817218/

  • BehobenSIMOTION SCOUT TIA V5.4cisa_csaf_ot

    https://support.industry.siemens.com/cs/ww/en/view/109784441/

  • BehobenSIMOTION SCOUT TIA V5.5cisa_csaf_ot

    https://support.industry.siemens.com/cs/ww/en/view/109817218/

  • BehobenSIMOTION SCOUT TIA V5.6cisa_csaf_ot

    Update to V5.6 SP1 HF7 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109989067/
  • BehobenSINAMICS Startdrive V17cisa_csaf_ot

    https://support.industry.siemens.com/cs/ww/en/view/109784441/

  • BehobenSINAMICS Startdrive V18cisa_csaf_ot

    https://support.industry.siemens.com/cs/ww/en/view/109817218/

  • BehobenSIRIUS Safety ES V18 (TIA Portal)cisa_csaf_ot

    https://support.industry.siemens.com/cs/ww/en/view/109817218/

  • BehobenSIRIUS Soft Starter ES V18 (TIA Portal)cisa_csaf_ot

    https://support.industry.siemens.com/cs/ww/en/view/109817218/

  • BehobenTIA Portal Cloud V19cisa_csaf_ot

    Fixed with V5.2.1.1, no user action required

  • BehobenTIA Portal Cloud V20cisa_csaf_ot

    Fixed with V5.2.2.2, no user action required

  • BehobenTIA Portal Test Suite V20cisa_csaf_ot

    Update to V20 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109963851/
  • MitigationSIMATIC PCS neo V4.1siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC PCS neo V5.0siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC PCS neo V6.0siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC S7-PLCSIM V17siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC STEP 7 V17siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC STEP 7 V18siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC STEP 7 V19siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC STEP 7 V20siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC WinCC V17siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC WinCC V18siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC WinCC V19siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC WinCC V20siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMOCODE ES V17siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMOCODE ES V18siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMOCODE ES V19siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMOCODE ES V20siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMOTION SCOUT TIA V5.4siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMOTION SCOUT TIA V5.5siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMOTION SCOUT TIA V5.6siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMOTION SCOUT TIA V5.7siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSINAMICS Startdrive V17siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSINAMICS Startdrive V18siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSINAMICS Startdrive V19siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSINAMICS Startdrive V20siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIRIUS Safety ES V17 (TIA Portal)siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIRIUS Safety ES V18 (TIA Portal)siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIRIUS Safety ES V19 (TIA Portal)siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIRIUS Safety ES V20 (TIA Portal)siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIRIUS Soft Starter ES V17 (TIA Portal)siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIRIUS Soft Starter ES V18 (TIA Portal)siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIRIUS Soft Starter ES V19 (TIA Portal)siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIRIUS Soft Starter ES V20 (TIA Portal)siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationTIA Portal Cloud V17siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationTIA Portal Cloud V18siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationTIA Portal Cloud V19siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationTIA Portal Cloud V20siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationTIA Portal Test Suite V20siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC PCS neo V4.1cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC PCS neo V5.0cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC PCS neo V6.0cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC S7-PLCSIM V17cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC STEP 7 V17cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC STEP 7 V18cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC STEP 7 V19cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC STEP 7 V20cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC WinCC V17cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC WinCC V18cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC WinCC V19cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC WinCC V20cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMOCODE ES V17cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMOCODE ES V18cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMOCODE ES V19cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMOCODE ES V20cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMOTION SCOUT TIA V5.4cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMOTION SCOUT TIA V5.5cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMOTION SCOUT TIA V5.6cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMOTION SCOUT TIA V5.7cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSINAMICS Startdrive V17cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSINAMICS Startdrive V18cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSINAMICS Startdrive V19cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSINAMICS Startdrive V20cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIRIUS Safety ES V17 (TIA Portal)cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIRIUS Safety ES V18 (TIA Portal)cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIRIUS Safety ES V19 (TIA Portal)cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIRIUS Safety ES V20 (TIA Portal)cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIRIUS Soft Starter ES V17 (TIA Portal)cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIRIUS Soft Starter ES V18 (TIA Portal)cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIRIUS Soft Starter ES V19 (TIA Portal)cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIRIUS Soft Starter ES V20 (TIA Portal)cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationTIA Portal Cloud V17cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationTIA Portal Cloud V18cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationTIA Portal Cloud V19cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationTIA Portal Cloud V20cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationTIA Portal Test Suite V20cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • Kein Fix verfügbarSIMOCODE ES V17siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIMOCODE ES V19siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIMOCODE ES V20siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIMOTION SCOUT TIA V5.7siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSINAMICS Startdrive V19siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSINAMICS Startdrive V20siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIRIUS Safety ES V17 (TIA Portal)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIRIUS Safety ES V19 (TIA Portal)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIRIUS Safety ES V20 (TIA Portal)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIRIUS Soft Starter ES V17 (TIA Portal)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIRIUS Soft Starter ES V19 (TIA Portal)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIRIUS Soft Starter ES V20 (TIA Portal)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarTIA Portal Cloud V17siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIMATIC STEP 7 V18cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIMATIC WinCC V18cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIMOCODE ES V17cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIMOCODE ES V19cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIMOCODE ES V20cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIMOTION SCOUT TIA V5.7cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSINAMICS Startdrive V19cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSINAMICS Startdrive V20cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIRIUS Safety ES V17 (TIA Portal)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIRIUS Safety ES V19 (TIA Portal)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIRIUS Safety ES V20 (TIA Portal)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIRIUS Soft Starter ES V17 (TIA Portal)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIRIUS Soft Starter ES V19 (TIA Portal)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIRIUS Soft Starter ES V20 (TIA Portal)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarTIA Portal Cloud V17cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarTIA Portal Cloud V18cisa_csaf_ot

    Currently no fix is available

  • Kein Fix geplantSIMATIC PCS neo V4.1siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantSIMATIC PCS neo V5.0siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantSIMATIC S7-PLCSIM V17siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantSIMATIC PCS neo V4.1cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantSIMATIC PCS neo V5.0cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantSIMATIC S7-PLCSIM V17cisa_csaf_ot

    Currently no fix is planned

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

8.6
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5.6–8.6

v3.18.2highCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:Hsecondary · NCSC-NL NL
v3.18.2highAV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU
v3.18.2highCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:Hsecondary · productcert@siemens.com DEAusnutzbarkeit 1.5 · Auswirkung 6
v3.18.2highCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:Hsecondary · Siemens ProductCERT DE
v3.18.2highCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:Hsecondary · CISA US
v4.08.6highCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:Hsecondary · ENISA EU
v4.08.6highCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · productcert@siemens.com DE
v4.05.6mediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)
03

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS
04

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-502USCWE-502USCWE-502USCWE-502USCWE-502US
05

betroffene Produkte (464)

Betroffene Produkte und Versionsbereiche.

20 von 464 angezeigt
06

Advisories (4)

Hersteller- und Ökosystem-Meldungen dazu.

  • NCSC-2026-0187Kwetsbaarheden verholpen in Siemens productenNL2026-06-09csaf · ncsc_nlNL

    Siemens heeft kwetsbaarheden verholpen in diverse producten als SCALANCE, SIMATIC, SINAMICS, SIPROTEC en TIA Portal.

  • SSA-693808SSA-693808: Deserialization Vulnerability in Siemens Engineering Platforms2025-08-12csaf · siemens_psirtDE

    Affected products do not properly restrict access permissions to a local Windows Named Pipe and do not properly sanitize user-controllable input sent to that Named Pipe. This could allow a local authenticated attacker to cause a type confusion and execute arbitrary code within the affected application and its privileges. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

  • WID-SEC-W-2025-1769Siemens SIMATIC S7: Mehrere Schwachstellen ermöglichen CodeausführungDeutsch2025-08-12csaf · cert_bundDE

    Ein lokaler Angreifer kann mehrere Schwachstellen in Siemens SIMATIC S7 ausnutzen, um beliebigen Programmcode auszuführen.

  • ICSA-25-226-03Siemens Engineering Platforms2025-08-12icsa · cisa_csaf_otUS

    Affected products do not properly restrict access permissions to a local Windows Named Pipe and do not properly sanitize user-controllable input sent to that Named Pipe. This could allow a local authenticated attacker to cause a type confusion and execute arbitrary code within the affected application and its privileges. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

07

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

08

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdfstec_bducert_bundcisa_csaf_otncsc_nlsiemens_psirtNVDCVE.orgMITRE
veröffentlicht 2025-08-12geändert 2026-10-13
09

Referenzen (5)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan