CVE-2024-49849

highpriority · track · 0EPSS 0.002 · 12 %ileDEEUNLRUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
0.22% (12th) EPSS
CVSS 7.8 · high
Is it mine?
227 products
Check your exposure
Who says so?
7 sources
cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-27

A vulnerability has been identified in SIMATIC S7-PLCSIM V16 (All versions), SIMATIC S7-PLCSIM V17 (All versions), SIMATIC STEP 7 Safety V16 (All versions), SIMATIC STEP 7 Safety V17 (All versions < V17 Update 9), SIMATIC STEP 7 Safety V18 (All versions < V18 Update 6), SIMATIC STEP 7 Safety V19 (All versions < V19 Update 4), SIMATIC STEP 7 V16 (All versions), SIMATIC STEP 7 V17 (All versions < V17 Update 9), SIMATIC STEP 7 V18 (All versions < V18 Update 6), SIMATIC STEP 7 V19 (All versions < V19 Update 4), SIMATIC WinCC Unified V16 (All versions), SIMATIC WinCC Unified V17 (All versions < V17 Update 9), SIMATIC WinCC Unified V18 (All versions < V18 Update 6), SIMATIC WinCC Unified V19 (All versions < V19 Update 4), SIMATIC WinCC V16 (All versions), SIMATIC WinCC V17 (All versions < V17 Update 9), SIMATIC WinCC V18 (All versions < V18 Update 6), SIMATIC WinCC V19 (All versions < V19 Update 4), SIMOCODE ES V16 (All versions), SIMOCODE ES V17 (All versions), SIMOCODE ES V18 (All versions), SIMOCODE ES V19 (All versions), SIMOTION SCOUT TIA V5.4 (All versions), SIMOTION SCOUT TIA V5.5 (All versions), SIMOTION SCOUT TIA V5.6 (All versions < V5.6 SP1 HF7), SINAMICS Startdrive V16 (All versions), SINAMICS Startdrive V17 (All versions), SINAMICS Startdrive V18 (All versions), SINAMICS Startdrive V19 (All versions), SIRIUS Safety ES V17 (TIA Portal) (All versions), SIRIUS Safety ES V18 (TIA Portal) (All versions < V18 Update 6), SIRIUS Safety ES V19 (TIA Portal) (All versions), SIRIUS Soft Starter ES V17 (TIA Portal) (All versions), SIRIUS Soft Starter ES V18 (TIA Portal) (All versions), SIRIUS Soft Starter ES V19 (TIA Portal) (All versions), TIA Portal Cloud V16 (All versions), TIA Portal Cloud V17 (All versions), TIA Portal Cloud V18 (All versions < V6.3.0.2), TIA Portal Cloud V19 (All versions < V5.2.1.1). Affected products do not properly sanitize user-controllable input when parsing log files. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • FixedSIMATIC STEP 7 Safety V17siemens_psirt

    Update to V17 Update 9 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109784441/
  • FixedSIMATIC STEP 7 Safety V18siemens_psirt

    Update to V18 Update 6 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109817218/
  • FixedSIMATIC STEP 7 Safety V19siemens_psirt

    Update to V19 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109925643/
  • FixedSIMATIC STEP 7 V17siemens_psirt

    Update to V17 Update 9 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109784441/
  • FixedSIMATIC STEP 7 V18siemens_psirt

    Update to V18 Update 6 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109817218/
  • FixedSIMATIC STEP 7 V19siemens_psirt

    Update to V19 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109925643/
  • FixedSIMATIC WinCC Unified V17siemens_psirt

    Update to V17 Update 9 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109784441/
  • FixedSIMATIC WinCC Unified V18siemens_psirt

    Update to V18 Update 6 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109817218/
  • FixedSIMATIC WinCC Unified V19siemens_psirt

    Update to V19 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109925643/
  • FixedSIMATIC WinCC V17siemens_psirt

    Update to V17 Update 9 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109784441/
  • FixedSIMATIC WinCC V18siemens_psirt

    Update to V18 Update 6 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109817218/
  • FixedSIMATIC WinCC V19siemens_psirt

    Update to V19 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109925643/
  • FixedSIMOTION SCOUT TIA V5.6siemens_psirt

    Update to V5.6 SP1 HF7 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109989067/
  • FixedSIRIUS Safety ES V18 (TIA Portal)siemens_psirt

    Update to V18 Update 6 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109817575/
  • FixedTIA Portal Cloud V18siemens_psirt

    Update to V6.3.0.2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109794456/
  • FixedTIA Portal Cloud V19siemens_psirt

    TIA Portal Cloud V5.2.1.1 or later version updated TIA Portal to V19 Update 4 or later version

  • FixedSIMATIC STEP 7 Safety V19cisa_csaf_ot

    Update to V19 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109925643/
  • FixedSIMATIC STEP 7 V19cisa_csaf_ot

    Update to V19 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109925643/
  • FixedSIMATIC WinCC Unified V19cisa_csaf_ot

    Update to V19 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109925643/
  • FixedSIMATIC WinCC V19cisa_csaf_ot

    Update to V19 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109925643/
  • FixedSIMOTION SCOUT TIA V5.6cisa_csaf_ot

    Update to V5.6 SP1 HF7 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109989067/
  • FixedTIA Portal Cloud V19cisa_csaf_ot

    TIA Portal Cloud V5.2.1.1 or later version updated TIA Portal to V19 Update 4 or later version

  • MitigationSIMATIC S7-PLCSIM V16siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC S7-PLCSIM V17siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC STEP 7 Safety V16siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC STEP 7 Safety V17siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC STEP 7 Safety V18siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC STEP 7 Safety V19siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC STEP 7 V16siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC STEP 7 V17siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC STEP 7 V18siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC STEP 7 V19siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC WinCC Unified V16siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC WinCC Unified V17siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC WinCC Unified V18siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC WinCC Unified V19siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC WinCC V16siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC WinCC V17siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC WinCC V18siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC WinCC V19siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMOCODE ES V16siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMOCODE ES V17siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMOCODE ES V18siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMOCODE ES V19siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMOTION SCOUT TIA V5.4siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMOTION SCOUT TIA V5.5siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMOTION SCOUT TIA V5.6siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSINAMICS Startdrive V16siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSINAMICS Startdrive V17siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSINAMICS Startdrive V18siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSINAMICS Startdrive V19siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIRIUS Safety ES V17 (TIA Portal)siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIRIUS Safety ES V18 (TIA Portal)siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIRIUS Safety ES V19 (TIA Portal)siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIRIUS Soft Starter ES V17 (TIA Portal)siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIRIUS Soft Starter ES V18 (TIA Portal)siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIRIUS Soft Starter ES V19 (TIA Portal)siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationTIA Portal Cloud V16siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationTIA Portal Cloud V17siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationTIA Portal Cloud V18siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationTIA Portal Cloud V19siemens_psirt

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC S7-PLCSIM V16cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC S7-PLCSIM V17cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC STEP 7 Safety V16cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC STEP 7 Safety V17cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC STEP 7 Safety V18cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC STEP 7 Safety V19cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC STEP 7 V16cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC STEP 7 V17cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC STEP 7 V18cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC STEP 7 V19cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC WinCC Unified V16cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC WinCC Unified V17cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC WinCC Unified V18cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC WinCC Unified V19cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC WinCC V16cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC WinCC V17cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC WinCC V18cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC WinCC V19cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMOCODE ES V16cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMOCODE ES V17cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMOCODE ES V18cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMOCODE ES V19cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMOTION SCOUT TIA V5.4cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMOTION SCOUT TIA V5.5cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMOTION SCOUT TIA V5.6cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSINAMICS Startdrive V16cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSINAMICS Startdrive V17cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSINAMICS Startdrive V18cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSINAMICS Startdrive V19cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIRIUS Safety ES V17 (TIA Portal)cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIRIUS Safety ES V18 (TIA Portal)cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIRIUS Safety ES V19 (TIA Portal)cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIRIUS Soft Starter ES V17 (TIA Portal)cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIRIUS Soft Starter ES V18 (TIA Portal)cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIRIUS Soft Starter ES V19 (TIA Portal)cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationTIA Portal Cloud V16cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationTIA Portal Cloud V17cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationTIA Portal Cloud V18cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationTIA Portal Cloud V19cisa_csaf_ot

    Avoid opening untrusted files from unknown sources in affected products

  • No fix availableSIMOCODE ES V17siemens_psirt

    Currently no fix is available

  • No fix availableSIMOCODE ES V18siemens_psirt

    Currently no fix is available

  • No fix availableSIMOCODE ES V19siemens_psirt

    Currently no fix is available

  • No fix availableSIMOTION SCOUT TIA V5.4siemens_psirt

    Currently no fix is available

  • No fix availableSIMOTION SCOUT TIA V5.5siemens_psirt

    Currently no fix is available

  • No fix availableSINAMICS Startdrive V17siemens_psirt

    Currently no fix is available

  • No fix availableSINAMICS Startdrive V18siemens_psirt

    Currently no fix is available

  • No fix availableSINAMICS Startdrive V19siemens_psirt

    Currently no fix is available

  • No fix availableSIRIUS Safety ES V17 (TIA Portal)siemens_psirt

    Currently no fix is available

  • No fix availableSIRIUS Safety ES V19 (TIA Portal)siemens_psirt

    Currently no fix is available

  • No fix availableSIRIUS Soft Starter ES V17 (TIA Portal)siemens_psirt

    Currently no fix is available

  • No fix availableSIRIUS Soft Starter ES V18 (TIA Portal)siemens_psirt

    Currently no fix is available

  • No fix availableSIRIUS Soft Starter ES V19 (TIA Portal)siemens_psirt

    Currently no fix is available

  • No fix availableTIA Portal Cloud V17siemens_psirt

    Currently no fix is available

  • No fix availableSIMATIC STEP 7 Safety V17cisa_csaf_ot

    Currently no fix is available

  • No fix availableSIMATIC STEP 7 Safety V18cisa_csaf_ot

    Currently no fix is available

  • No fix availableSIMATIC STEP 7 V17cisa_csaf_ot

    Currently no fix is available

  • No fix availableSIMATIC STEP 7 V18cisa_csaf_ot

    Currently no fix is available

  • No fix availableSIMATIC WinCC Unified V17cisa_csaf_ot

    Currently no fix is available

  • No fix availableSIMATIC WinCC Unified V18cisa_csaf_ot

    Currently no fix is available

  • No fix availableSIMATIC WinCC V17cisa_csaf_ot

    Currently no fix is available

  • No fix availableSIMATIC WinCC V18cisa_csaf_ot

    Currently no fix is available

  • No fix availableSIMOCODE ES V17cisa_csaf_ot

    Currently no fix is available

  • No fix availableSIMOCODE ES V18cisa_csaf_ot

    Currently no fix is available

  • No fix availableSIMOCODE ES V19cisa_csaf_ot

    Currently no fix is available

  • No fix availableSIMOTION SCOUT TIA V5.4cisa_csaf_ot

    Currently no fix is available

  • No fix availableSIMOTION SCOUT TIA V5.5cisa_csaf_ot

    Currently no fix is available

  • No fix availableSINAMICS Startdrive V17cisa_csaf_ot

    Currently no fix is available

  • No fix availableSINAMICS Startdrive V18cisa_csaf_ot

    Currently no fix is available

  • No fix availableSINAMICS Startdrive V19cisa_csaf_ot

    Currently no fix is available

  • No fix availableSIRIUS Safety ES V17 (TIA Portal)cisa_csaf_ot

    Currently no fix is available

  • No fix availableSIRIUS Safety ES V18 (TIA Portal)cisa_csaf_ot

    Currently no fix is available

  • No fix availableSIRIUS Safety ES V19 (TIA Portal)cisa_csaf_ot

    Currently no fix is available

  • No fix availableSIRIUS Soft Starter ES V17 (TIA Portal)cisa_csaf_ot

    Currently no fix is available

  • No fix availableSIRIUS Soft Starter ES V18 (TIA Portal)cisa_csaf_ot

    Currently no fix is available

  • No fix availableSIRIUS Soft Starter ES V19 (TIA Portal)cisa_csaf_ot

    Currently no fix is available

  • No fix availableTIA Portal Cloud V17cisa_csaf_ot

    Currently no fix is available

  • No fix availableTIA Portal Cloud V18cisa_csaf_ot

    Currently no fix is available

  • No fix plannedSIMATIC S7-PLCSIM V16siemens_psirt

    Currently no fix is planned

  • No fix plannedSIMATIC S7-PLCSIM V17siemens_psirt

    Currently no fix is planned

  • No fix plannedSIMATIC STEP 7 Safety V16siemens_psirt

    Currently no fix is planned

  • No fix plannedSIMATIC STEP 7 V16siemens_psirt

    Currently no fix is planned

  • No fix plannedSIMATIC WinCC Unified V16siemens_psirt

    Currently no fix is planned

  • No fix plannedSIMATIC WinCC V16siemens_psirt

    Currently no fix is planned

  • No fix plannedSIMOCODE ES V16siemens_psirt

    Currently no fix is planned

  • No fix plannedSINAMICS Startdrive V16siemens_psirt

    Currently no fix is planned

  • No fix plannedTIA Portal Cloud V16siemens_psirt

    Currently no fix is planned

  • No fix plannedSIMATIC S7-PLCSIM V16cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedSIMATIC S7-PLCSIM V17cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedSIMATIC STEP 7 Safety V16cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedSIMATIC STEP 7 V16cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedSIMATIC WinCC Unified V16cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedSIMATIC WinCC V16cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedSIMOCODE ES V16cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedSINAMICS Startdrive V16cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedTIA Portal Cloud V16cisa_csaf_ot

    Currently no fix is planned

02

cvss

Technical severity, 0–10. One row per scoring source.

8.4
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5.7–8.4

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · productcert@siemens.com DEexploitability 1.8 · impact 5.9
v3.17.8highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE
v3.17.8highAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU
v3.17.8highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · CISA US
v4.08.4highCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · productcert@siemens.com DE
v4.08.4highCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:Nsecondary · ENISA EU
v4.05.7mediumCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)
03

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS
04

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-502USCWE-502USCWE-502USCWE-502USCWE-502US
05

affected products (227)

Products and version ranges known to be affected.

showing 20 of 227
06

advisories (4)

Vendor and ecosystem advisories describing this.

  • NCSC-2024-0473Kwetsbaarheden verholpen in Siemens productenNL2024-12-10csaf · ncsc_nlNL

    Siemens heeft kwetsbaarheden verholpen in diverse producten als COMOS, RUGGEDCOM, SENTRON, SICAM, SIMATIC en TeamCenter.

  • SSA-800126SSA-800126: Deserialization Vulnerability in Siemens Engineering Platforms before V202024-12-10csaf · siemens_psirtDE

    Affected products do not properly sanitize user-controllable input when parsing files. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available. Siemens has released products based on the Totally Integrated Automation Portal (TIA Portal) V20 which are not affected by CVE-2024-49849. See the chapter "Additional Information" below for more details.

  • WID-SEC-W-2024-3656Siemens SIMATIC S7: Mehrere Schwachstellen ermöglichen CodeausführungDeutsch2024-12-10csaf · cert_bundDE

    Ein lokaler Angreifer kann mehrere Schwachstellen in Siemens SIMATIC S7 ausnutzen, um beliebigen Programmcode auszuführen.

  • ICSA-24-347-05Siemens Siemens Engineering Platforms2024-12-10icsa · cisa_csaf_otUS

    Affected products do not properly sanitize user-controllable input when parsing files. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available. Siemens has released products based on the Totally Integrated Automation Portal (TIA Portal) V20 which are not affected by CVE-2024-49849. See the chapter "Additional Information" below for more details.

07

also known as (5)

Other names and identifiers for this entity.

08

sources

Which sources assert this record, and when.

cnnvdenisa_euvdfstec_bducert_bundcisa_csaf_otncsc_nlsiemens_psirtNVDCVE.orgMITRE
published 2024-12-10modified 2026-10-13
09

references (5)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan