CVE-2023-32736

highpriority · track · 0EPSS 0.002 · 12 %ileDEEUNLUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.22% (12th) EPSS

CVSS 7.3 · high

Is it mine?

152 products

Check your exposure

Who says so?

6 sources

cnnvd · enisa_euvd · cert_bund · cisa_csaf_ot

EPSS · scored 2026-10-27

A vulnerability has been identified in SIMATIC S7-PLCSIM V16 (All versions), SIMATIC S7-PLCSIM V17 (All versions), SIMATIC STEP 7 Safety V16 (All versions), SIMATIC STEP 7 Safety V17 (All versions < V17 Update 8), SIMATIC STEP 7 Safety V18 (All versions < V18 Update 5), SIMATIC STEP 7 V16 (All versions), SIMATIC STEP 7 V17 (All versions < V17 Update 8), SIMATIC STEP 7 V18 (All versions < V18 Update 5), SIMATIC WinCC Unified V16 (All versions), SIMATIC WinCC Unified V17 (All versions < V17 Update 8), SIMATIC WinCC Unified V18 (All versions < V18 SP5), SIMATIC WinCC V16 (All versions), SIMATIC WinCC V17 (All versions < V17 Update 8), SIMATIC WinCC V18 (All versions < V18 SP5), SIMOCODE ES V16 (All versions), SIMOCODE ES V17 (All versions < V17 Update 8), SIMOCODE ES V18 (All versions), SIMOTION SCOUT TIA V5.4 SP1 (All versions), SIMOTION SCOUT TIA V5.4 SP3 (All versions), SIMOTION SCOUT TIA V5.5 SP1 (All versions), SINAMICS Startdrive V16 (All versions), SINAMICS Startdrive V17 (All versions), SINAMICS Startdrive V18 (All versions), SIRIUS Safety ES V17 (TIA Portal) (All versions < V17 Update 8), SIRIUS Safety ES V18 (TIA Portal) (All versions), SIRIUS Soft Starter ES V17 (TIA Portal) (All versions < V17 Update 8), SIRIUS Soft Starter ES V18 (TIA Portal) (All versions), TIA Portal Cloud V16 (All versions), TIA Portal Cloud V17 (All versions < V4.6.0.1), TIA Portal Cloud V18 (All versions < V4.6.1.0). Affected products do not properly sanitize user-controllable input when parsing user settings. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedSIMATIC STEP 7 Safety V17siemens_psirt
Update to V17 Update 8 or later version
FixedSIMATIC STEP 7 Safety V18siemens_psirt
Update to V18 Update 5 or later version
FixedSIMATIC STEP 7 V17siemens_psirt
Update to V17 Update 8 or later version
FixedSIMATIC STEP 7 V18siemens_psirt
Update to V18 Update 5 or later version
FixedSIMATIC WinCC Unified V17siemens_psirt
Update to V17 Update 8 or later version
FixedSIMATIC WinCC Unified V18siemens_psirt
Update to V18 SP5 or later version
FixedSIMATIC WinCC V17siemens_psirt
Update to V17 Update 8 or later version
FixedSIMATIC WinCC V18siemens_psirt
Update to V18 SP5 or later version
FixedSIMOCODE ES V17siemens_psirt
Update to V17 Update 8 or later version
FixedSIMOCODE ES V18siemens_psirt
Update SIMATIC STEP 7 V18 to V18 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817218/
FixedSIMOTION SCOUT TIA V5.4 SP3siemens_psirt
Update SIMATIC STEP 7 V17 to V17 Update 8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109784441/
FixedSIMOTION SCOUT TIA V5.5 SP1siemens_psirt
Update SIMATIC STEP 7 V18 to V18 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817218/
FixedSINAMICS Startdrive V17siemens_psirt
Update SIMATIC STEP 7 V17 to V17 Update 8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109784441/
FixedSINAMICS Startdrive V18siemens_psirt
Update SIMATIC STEP 7 V18 to V18 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817218/
FixedSIRIUS Safety ES V17 (TIA Portal)siemens_psirt
Update to V17 Update 8 or later version
FixedSIRIUS Safety ES V18 (TIA Portal)siemens_psirt
Update SIMATIC STEP 7 V18 to V18 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817218/
FixedSIRIUS Soft Starter ES V17 (TIA Portal)siemens_psirt
Update to V17 Update 8 or later version
FixedSIRIUS Soft Starter ES V18 (TIA Portal)siemens_psirt
Update SIMATIC STEP 7 V18 to V18 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817218/
FixedTIA Portal Cloud V17siemens_psirt
TIA Portal Cloud V4.6.0.1 or later version updated TIA Portal to V17 Update 8 or later version
FixedTIA Portal Cloud V18siemens_psirt
TIA Portal Cloud V4.6.1.0 or later version updated TIA Portal to V18 Update 5 or later version
FixedSIMATIC STEP 7 Safety V17cisa_csaf_ot
Update to V17 Update 8 or later version
FixedSIMATIC STEP 7 Safety V18cisa_csaf_ot
Update to V18 Update 5 or later version
FixedSIMATIC STEP 7 V17cisa_csaf_ot
Update to V17 Update 8 or later version
FixedSIMATIC STEP 7 V18cisa_csaf_ot
Update to V18 Update 5 or later version
FixedSIMATIC WinCC Unified V17cisa_csaf_ot
Update to V17 Update 8 or later version
FixedSIMATIC WinCC Unified V18cisa_csaf_ot
Update to V18 SP5 or later version
FixedSIMATIC WinCC V17cisa_csaf_ot
Update to V17 Update 8 or later version
FixedSIMATIC WinCC V18cisa_csaf_ot
Update to V18 SP5 or later version
FixedSIMOCODE ES V17cisa_csaf_ot
Update to V17 Update 8 or later version
FixedSIMOCODE ES V18cisa_csaf_ot
Update SIMATIC STEP 7 V18 to V18 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817218/
FixedSIMOTION SCOUT TIA V5.4 SP3cisa_csaf_ot
Update SIMATIC STEP 7 V17 to V17 Update 8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109784441/
FixedSIMOTION SCOUT TIA V5.5 SP1cisa_csaf_ot
Update SIMATIC STEP 7 V18 to V18 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817218/
FixedSINAMICS Startdrive V17cisa_csaf_ot
Update SIMATIC STEP 7 V17 to V17 Update 8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109784441/
FixedSINAMICS Startdrive V18cisa_csaf_ot
Update SIMATIC STEP 7 V18 to V18 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817218/
FixedSIRIUS Safety ES V17 (TIA Portal)cisa_csaf_ot
Update to V17 Update 8 or later version
FixedSIRIUS Safety ES V18 (TIA Portal)cisa_csaf_ot
Update SIMATIC STEP 7 V18 to V18 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817218/
FixedSIRIUS Soft Starter ES V17 (TIA Portal)cisa_csaf_ot
Update to V17 Update 8 or later version
FixedSIRIUS Soft Starter ES V18 (TIA Portal)cisa_csaf_ot
Update SIMATIC STEP 7 V18 to V18 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817218/
FixedTIA Portal Cloud V17cisa_csaf_ot
TIA Portal Cloud V4.6.0.1 or later version updated TIA Portal to V17 Update 8 or later version
FixedTIA Portal Cloud V18cisa_csaf_ot
TIA Portal Cloud V4.6.1.0 or later version updated TIA Portal to V18 Update 5 or later version
MitigationSIMATIC S7-PLCSIM V16siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC S7-PLCSIM V17siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC STEP 7 Safety V16siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC STEP 7 Safety V17siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC STEP 7 Safety V18siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC STEP 7 V16siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC STEP 7 V17siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC STEP 7 V18siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC WinCC Unified V16siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC WinCC Unified V17siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC WinCC Unified V18siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC WinCC V16siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC WinCC V17siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC WinCC V18siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMOCODE ES V16siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMOCODE ES V17siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMOCODE ES V18siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMOTION SCOUT TIA V5.4 SP1siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMOTION SCOUT TIA V5.4 SP3siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMOTION SCOUT TIA V5.5 SP1siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSINAMICS Startdrive V16siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSINAMICS Startdrive V17siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSINAMICS Startdrive V18siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIRIUS Safety ES V17 (TIA Portal)siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIRIUS Safety ES V18 (TIA Portal)siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIRIUS Soft Starter ES V17 (TIA Portal)siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIRIUS Soft Starter ES V18 (TIA Portal)siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationTIA Portal Cloud V16siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationTIA Portal Cloud V17siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationTIA Portal Cloud V18siemens_psirt
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC S7-PLCSIM V16cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC S7-PLCSIM V17cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC STEP 7 Safety V16cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC STEP 7 Safety V17cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC STEP 7 Safety V18cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC STEP 7 V16cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC STEP 7 V17cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC STEP 7 V18cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC WinCC Unified V16cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC WinCC Unified V17cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC WinCC Unified V18cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC WinCC V16cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC WinCC V17cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMATIC WinCC V18cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMOCODE ES V16cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMOCODE ES V17cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMOCODE ES V18cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMOTION SCOUT TIA V5.4 SP1cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMOTION SCOUT TIA V5.4 SP3cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIMOTION SCOUT TIA V5.5 SP1cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSINAMICS Startdrive V16cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSINAMICS Startdrive V17cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSINAMICS Startdrive V18cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIRIUS Safety ES V17 (TIA Portal)cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIRIUS Safety ES V18 (TIA Portal)cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIRIUS Soft Starter ES V17 (TIA Portal)cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationSIRIUS Soft Starter ES V18 (TIA Portal)cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationTIA Portal Cloud V16cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationTIA Portal Cloud V17cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
MitigationTIA Portal Cloud V18cisa_csaf_ot
Avoid opening untrusted files from unknown sources in affected products
No fix plannedSIMATIC S7-PLCSIM V16siemens_psirt
Currently no fix is planned
No fix plannedSIMATIC S7-PLCSIM V17siemens_psirt
Currently no fix is planned
No fix plannedSIMATIC STEP 7 Safety V16siemens_psirt
Currently no fix is planned
No fix plannedSIMATIC STEP 7 V16siemens_psirt
Currently no fix is planned
No fix plannedSIMATIC WinCC Unified V16siemens_psirt
Currently no fix is planned
No fix plannedSIMATIC WinCC V16siemens_psirt
Currently no fix is planned
No fix plannedSIMOCODE ES V16siemens_psirt
Currently no fix is planned
No fix plannedSIMOTION SCOUT TIA V5.4 SP1siemens_psirt
Currently no fix is planned
No fix plannedSINAMICS Startdrive V16siemens_psirt
Currently no fix is planned
No fix plannedTIA Portal Cloud V16siemens_psirt
Currently no fix is planned
No fix plannedSIMATIC S7-PLCSIM V16cisa_csaf_ot
Currently no fix is planned
No fix plannedSIMATIC S7-PLCSIM V17cisa_csaf_ot
Currently no fix is planned
No fix plannedSIMATIC STEP 7 Safety V16cisa_csaf_ot
Currently no fix is planned
No fix plannedSIMATIC STEP 7 V16cisa_csaf_ot
Currently no fix is planned
No fix plannedSIMATIC WinCC Unified V16cisa_csaf_ot
Currently no fix is planned
No fix plannedSIMATIC WinCC V16cisa_csaf_ot
Currently no fix is planned
No fix plannedSIMOCODE ES V16cisa_csaf_ot
Currently no fix is planned
No fix plannedSIMOTION SCOUT TIA V5.4 SP1cisa_csaf_ot
Currently no fix is planned
No fix plannedSINAMICS Startdrive V16cisa_csaf_ot
Currently no fix is planned
No fix plannedTIA Portal Cloud V16cisa_csaf_ot
Currently no fix is planned

cvss

Technical severity, 0–10. One row per scoring source.

7.3

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4–7.3

v3.17.3highCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:Hsecondary · productcert@siemens.com DEexploitability 1.3 · impact 5.9

v3.17.3highCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · CISA US

v3.17.3highCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE

v3.17.3highCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · NCSC-NL NL

v4.07highCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:Nsecondary · ENISA EU

v4.07highCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · productcert@siemens.com DE

v4.04mediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-502USCWE-502USCWE-502USCWE-502US

affected products (152)

Products and version ranges known to be affected.

Siemens SIMATIC S7 V16all versionscert_bundDEcpe:/h:siemens:simatic_s7:v16
Siemens SIMATIC S7 V17all versionscert_bundDEcpe:/h:siemens:simatic_s7:v17
SIMATIC S7-PLCSIM V16all versionscisa_csaf_otUS
SIMATIC S7-PLCSIM V17all versionscisa_csaf_otUS
SIMATIC STEP 7 Safety V16all versionscisa_csaf_otUS
SIMATIC STEP 7 Safety V17all versionscisa_csaf_otUS
SIMATIC STEP 7 Safety V18all versionscisa_csaf_otUS
SIMATIC STEP 7 V16all versionscisa_csaf_otUS
SIMATIC STEP 7 V17all versionscisa_csaf_otUS
SIMATIC STEP 7 V18all versionscisa_csaf_otUS
SIMATIC WinCC Unified V16all versionscisa_csaf_otUS
SIMATIC WinCC Unified V17all versionscisa_csaf_otUS
SIMATIC WinCC Unified V18all versionscisa_csaf_otUS
SIMATIC WinCC V16all versionscisa_csaf_otUS
SIMATIC WinCC V17all versionscisa_csaf_otUS
SIMATIC WinCC V18all versionscisa_csaf_otUS
SIMOCODE ES V16all versionscisa_csaf_otUS
SIMOCODE ES V17all versionscisa_csaf_otUS
SIMOCODE ES V18all versionscisa_csaf_otUS
SIMOTION SCOUT TIA V5.4 SP1all versionscisa_csaf_otUS

showing 20 of 152

advisories (4)

Vendor and ecosystem advisories describing this.

NCSC-2024-0433Kwetsbaarheden verholpen in Siemens productenNL2024-11-12csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als Mendix, RUGGEDCOM, SCALANCE, SIMATIC en SINEC.
SSA-871035SSA-871035: Session-Memory Deserialization Vulnerability in Siemens Engineering Platforms Before V192024-11-12csaf · siemens_psirtDE
Affected products do not properly sanitize user-controllable input when parsing files. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, or not yet available.
WID-SEC-W-2024-3416Siemens SIMATIC S7: Schwachstelle ermöglicht CodeausführungDeutsch2024-11-12csaf · cert_bundDE
Ein lokaler Angreifer kann eine Schwachstelle in Siemens SIMATIC S7 ausnutzen, um beliebigen Programmcode auszuführen.
ICSA-24-319-07Siemens Engineering Platforms2024-11-12icsa · cisa_csaf_otUS
Affected products do not properly sanitize user-controllable input when parsing files. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, or not yet available.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd cert_bund cisa_csaf_ot ncsc_nl siemens_psirt NVD CVE.org MITRE

published 2024-11-12modified 2026-06-17

references (3)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan