CVE-2024-54678

highpriority · track · 0EPSS 0.002 · 6 %ileDEEUNLRUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
0.17% (6th) EPSS
CVSS 8.2 · high
Is it mine?
464 products
Check your exposure
Who says so?
7 sources
cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-22

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), SIMATIC S7-PLCSIM V17 (All versions), SIMATIC STEP 7 V17 (All versions < V17 Update 9), SIMATIC STEP 7 V18 (All versions < V18 Update 6), SIMATIC STEP 7 V19 (All versions < V19 Update 4), SIMATIC STEP 7 V20 (All versions < V20 Update 4), SIMATIC WinCC V17 (All versions < V17 Update 9), SIMATIC WinCC V18 (All versions < V18 Update 6), SIMATIC WinCC V19 (All versions < V19 Update 4), SIMATIC WinCC V20 (All versions < V20 Update 4), SIMOCODE ES V17 (All versions), SIMOCODE ES V18 (All versions), SIMOCODE ES V19 (All versions), SIMOCODE ES V20 (All versions), SIMOTION SCOUT TIA V5.4 (All versions), SIMOTION SCOUT TIA V5.5 (All versions), SIMOTION SCOUT TIA V5.6 (All versions < V5.6 SP1 HF7), SIMOTION SCOUT TIA V5.7 (All versions), SINAMICS Startdrive V17 (All versions), SINAMICS Startdrive V18 (All versions), SINAMICS Startdrive V19 (All versions), SINAMICS Startdrive V20 (All versions), SIRIUS Safety ES V17 (TIA Portal) (All versions), SIRIUS Safety ES V18 (TIA Portal) (All versions), SIRIUS Safety ES V19 (TIA Portal) (All versions), SIRIUS Safety ES V20 (TIA Portal) (All versions), SIRIUS Soft Starter ES V17 (TIA Portal) (All versions), SIRIUS Soft Starter ES V18 (TIA Portal) (All versions), SIRIUS Soft Starter ES V19 (TIA Portal) (All versions), SIRIUS Soft Starter ES V20 (TIA Portal) (All versions), TIA Portal Cloud V17 (All versions), TIA Portal Cloud V18 (All versions < V6.3.0.2), TIA Portal Cloud V19 (All versions < V5.2.1.1), TIA Portal Cloud V20 (All versions < V5.2.2.2), TIA Portal Test Suite V20 (All versions < V20 Update 4). Affected products do not properly sanitize Interprocess Communication input received through a Windows Named Pipe accessible to all local users. This could allow an authenticated local attacker to cause a type confusion and execute arbitrary code within the affected application.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • FixedSIMATIC PCS neo V6.0siemens_psirt

    Update to V6.0 SP1 Update 1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/110000357/
  • FixedSIMATIC STEP 7 V17siemens_psirt

    Update to V17 Update 9 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109784441/
  • FixedSIMATIC STEP 7 V18siemens_psirt

    Update to V18 Update 6 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109817218/
  • FixedSIMATIC STEP 7 V19siemens_psirt

    Update to V19 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109925643/
  • FixedSIMATIC STEP 7 V20siemens_psirt

    Update to V20 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109963851/
  • FixedSIMATIC WinCC V17siemens_psirt

    Update to V17 Update 9 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109784441/
  • FixedSIMATIC WinCC V18siemens_psirt

    Update to V18 Update 6 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109817218/
  • FixedSIMATIC WinCC V19siemens_psirt

    Update to V19 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109925643/
  • FixedSIMATIC WinCC V20siemens_psirt

    Update to V20 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109963851/
  • FixedSIMOCODE ES V18siemens_psirt

    https://support.industry.siemens.com/cs/ww/en/view/109817218/

  • FixedSIMOTION SCOUT TIA V5.4siemens_psirt

    https://support.industry.siemens.com/cs/ww/en/view/109784441/

  • FixedSIMOTION SCOUT TIA V5.5siemens_psirt

    https://support.industry.siemens.com/cs/ww/en/view/109817218/

  • FixedSIMOTION SCOUT TIA V5.6siemens_psirt

    Update to V5.6 SP1 HF7 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109989067/
  • FixedSINAMICS Startdrive V17siemens_psirt

    https://support.industry.siemens.com/cs/ww/en/view/109784441/

  • FixedSINAMICS Startdrive V18siemens_psirt

    https://support.industry.siemens.com/cs/ww/en/view/109817218/

  • FixedSIRIUS Safety ES V18 (TIA Portal)siemens_psirt

    https://support.industry.siemens.com/cs/ww/en/view/109817218/

  • FixedSIRIUS Soft Starter ES V18 (TIA Portal)siemens_psirt

    https://support.industry.siemens.com/cs/ww/en/view/109817218/

  • FixedTIA Portal Cloud V18siemens_psirt

    Update to V6.3.0.2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109794456/
  • FixedTIA Portal Cloud V19siemens_psirt

    Fixed with V5.2.1.1, no user action required

  • FixedTIA Portal Cloud V20siemens_psirt

    Fixed with V5.2.2.2, no user action required

  • FixedTIA Portal Test Suite V20siemens_psirt

    Update to V20 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109963851/
  • FixedSIMATIC PCS neo V6.0cisa_csaf_ot

    Update to V6.0 SP1 Update 1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/110000357/
  • FixedSIMATIC STEP 7 V17cisa_csaf_ot

    Update to V17 Update 9 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109784441/
  • FixedSIMATIC STEP 7 V19cisa_csaf_ot

    Update to V19 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109925643/
  • FixedSIMATIC STEP 7 V20cisa_csaf_ot

    Update to V20 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109963851/
  • FixedSIMATIC WinCC V17cisa_csaf_ot

    Update to V17 Update 9 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109784441/
  • FixedSIMATIC WinCC V19cisa_csaf_ot

    Update to V19 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109925643/
  • FixedSIMATIC WinCC V20cisa_csaf_ot

    Update to V20 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109963851/
  • FixedSIMOCODE ES V18cisa_csaf_ot

    https://support.industry.siemens.com/cs/ww/en/view/109817218/

  • FixedSIMOTION SCOUT TIA V5.4cisa_csaf_ot

    https://support.industry.siemens.com/cs/ww/en/view/109784441/

  • FixedSIMOTION SCOUT TIA V5.5cisa_csaf_ot

    https://support.industry.siemens.com/cs/ww/en/view/109817218/

  • FixedSIMOTION SCOUT TIA V5.6cisa_csaf_ot

    Update to V5.6 SP1 HF7 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109989067/
  • FixedSINAMICS Startdrive V17cisa_csaf_ot

    https://support.industry.siemens.com/cs/ww/en/view/109784441/

  • FixedSINAMICS Startdrive V18cisa_csaf_ot

    https://support.industry.siemens.com/cs/ww/en/view/109817218/

  • FixedSIRIUS Safety ES V18 (TIA Portal)cisa_csaf_ot

    https://support.industry.siemens.com/cs/ww/en/view/109817218/

  • FixedSIRIUS Soft Starter ES V18 (TIA Portal)cisa_csaf_ot

    https://support.industry.siemens.com/cs/ww/en/view/109817218/

  • FixedTIA Portal Cloud V19cisa_csaf_ot

    Fixed with V5.2.1.1, no user action required

  • FixedTIA Portal Cloud V20cisa_csaf_ot

    Fixed with V5.2.2.2, no user action required

  • FixedTIA Portal Test Suite V20cisa_csaf_ot

    Update to V20 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109963851/
  • MitigationSIMATIC PCS neo V4.1siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC PCS neo V5.0siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC PCS neo V6.0siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC S7-PLCSIM V17siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC STEP 7 V17siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC STEP 7 V18siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC STEP 7 V19siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC STEP 7 V20siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC WinCC V17siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC WinCC V18siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC WinCC V19siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC WinCC V20siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMOCODE ES V17siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMOCODE ES V18siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMOCODE ES V19siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMOCODE ES V20siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMOTION SCOUT TIA V5.4siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMOTION SCOUT TIA V5.5siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMOTION SCOUT TIA V5.6siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMOTION SCOUT TIA V5.7siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSINAMICS Startdrive V17siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSINAMICS Startdrive V18siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSINAMICS Startdrive V19siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSINAMICS Startdrive V20siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIRIUS Safety ES V17 (TIA Portal)siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIRIUS Safety ES V18 (TIA Portal)siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIRIUS Safety ES V19 (TIA Portal)siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIRIUS Safety ES V20 (TIA Portal)siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIRIUS Soft Starter ES V17 (TIA Portal)siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIRIUS Soft Starter ES V18 (TIA Portal)siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIRIUS Soft Starter ES V19 (TIA Portal)siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIRIUS Soft Starter ES V20 (TIA Portal)siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationTIA Portal Cloud V17siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationTIA Portal Cloud V18siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationTIA Portal Cloud V19siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationTIA Portal Cloud V20siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationTIA Portal Test Suite V20siemens_psirt

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC PCS neo V4.1cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC PCS neo V5.0cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC PCS neo V6.0cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC S7-PLCSIM V17cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC STEP 7 V17cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC STEP 7 V18cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC STEP 7 V19cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC STEP 7 V20cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC WinCC V17cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC WinCC V18cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC WinCC V19cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMATIC WinCC V20cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMOCODE ES V17cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMOCODE ES V18cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMOCODE ES V19cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMOCODE ES V20cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMOTION SCOUT TIA V5.4cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMOTION SCOUT TIA V5.5cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMOTION SCOUT TIA V5.6cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIMOTION SCOUT TIA V5.7cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSINAMICS Startdrive V17cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSINAMICS Startdrive V18cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSINAMICS Startdrive V19cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSINAMICS Startdrive V20cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIRIUS Safety ES V17 (TIA Portal)cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIRIUS Safety ES V18 (TIA Portal)cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIRIUS Safety ES V19 (TIA Portal)cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIRIUS Safety ES V20 (TIA Portal)cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIRIUS Soft Starter ES V17 (TIA Portal)cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIRIUS Soft Starter ES V18 (TIA Portal)cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIRIUS Soft Starter ES V19 (TIA Portal)cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationSIRIUS Soft Starter ES V20 (TIA Portal)cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationTIA Portal Cloud V17cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationTIA Portal Cloud V18cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationTIA Portal Cloud V19cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationTIA Portal Cloud V20cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • MitigationTIA Portal Test Suite V20cisa_csaf_ot

    On Desktop systems: Execute affected software on Windows hosts where only a single user is configured

  • No fix availableSIMOCODE ES V17siemens_psirt

    Currently no fix is available

  • No fix availableSIMOCODE ES V19siemens_psirt

    Currently no fix is available

  • No fix availableSIMOCODE ES V20siemens_psirt

    Currently no fix is available

  • No fix availableSIMOTION SCOUT TIA V5.7siemens_psirt

    Currently no fix is available

  • No fix availableSINAMICS Startdrive V19siemens_psirt

    Currently no fix is available

  • No fix availableSINAMICS Startdrive V20siemens_psirt

    Currently no fix is available

  • No fix availableSIRIUS Safety ES V17 (TIA Portal)siemens_psirt

    Currently no fix is available

  • No fix availableSIRIUS Safety ES V19 (TIA Portal)siemens_psirt

    Currently no fix is available

  • No fix availableSIRIUS Safety ES V20 (TIA Portal)siemens_psirt

    Currently no fix is available

  • No fix availableSIRIUS Soft Starter ES V17 (TIA Portal)siemens_psirt

    Currently no fix is available

  • No fix availableSIRIUS Soft Starter ES V19 (TIA Portal)siemens_psirt

    Currently no fix is available

  • No fix availableSIRIUS Soft Starter ES V20 (TIA Portal)siemens_psirt

    Currently no fix is available

  • No fix availableTIA Portal Cloud V17siemens_psirt

    Currently no fix is available

  • No fix availableSIMATIC STEP 7 V18cisa_csaf_ot

    Currently no fix is available

  • No fix availableSIMATIC WinCC V18cisa_csaf_ot

    Currently no fix is available

  • No fix availableSIMOCODE ES V17cisa_csaf_ot

    Currently no fix is available

  • No fix availableSIMOCODE ES V19cisa_csaf_ot

    Currently no fix is available

  • No fix availableSIMOCODE ES V20cisa_csaf_ot

    Currently no fix is available

  • No fix availableSIMOTION SCOUT TIA V5.7cisa_csaf_ot

    Currently no fix is available

  • No fix availableSINAMICS Startdrive V19cisa_csaf_ot

    Currently no fix is available

  • No fix availableSINAMICS Startdrive V20cisa_csaf_ot

    Currently no fix is available

  • No fix availableSIRIUS Safety ES V17 (TIA Portal)cisa_csaf_ot

    Currently no fix is available

  • No fix availableSIRIUS Safety ES V19 (TIA Portal)cisa_csaf_ot

    Currently no fix is available

  • No fix availableSIRIUS Safety ES V20 (TIA Portal)cisa_csaf_ot

    Currently no fix is available

  • No fix availableSIRIUS Soft Starter ES V17 (TIA Portal)cisa_csaf_ot

    Currently no fix is available

  • No fix availableSIRIUS Soft Starter ES V19 (TIA Portal)cisa_csaf_ot

    Currently no fix is available

  • No fix availableSIRIUS Soft Starter ES V20 (TIA Portal)cisa_csaf_ot

    Currently no fix is available

  • No fix availableTIA Portal Cloud V17cisa_csaf_ot

    Currently no fix is available

  • No fix availableTIA Portal Cloud V18cisa_csaf_ot

    Currently no fix is available

  • No fix plannedSIMATIC PCS neo V4.1siemens_psirt

    Currently no fix is planned

  • No fix plannedSIMATIC PCS neo V5.0siemens_psirt

    Currently no fix is planned

  • No fix plannedSIMATIC S7-PLCSIM V17siemens_psirt

    Currently no fix is planned

  • No fix plannedSIMATIC PCS neo V4.1cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedSIMATIC PCS neo V5.0cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedSIMATIC S7-PLCSIM V17cisa_csaf_ot

    Currently no fix is planned

02

cvss

Technical severity, 0–10. One row per scoring source.

8.6
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5.6–8.6

v3.18.2highCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:Hsecondary · NCSC-NL NL
v3.18.2highAV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU
v3.18.2highCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:Hsecondary · productcert@siemens.com DEexploitability 1.5 · impact 6
v3.18.2highCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:Hsecondary · Siemens ProductCERT DE
v3.18.2highCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:Hsecondary · CISA US
v4.08.6highCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:Hsecondary · ENISA EU
v4.08.6highCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · productcert@siemens.com DE
v4.05.6mediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)
03

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS
04

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-502USCWE-502USCWE-502USCWE-502USCWE-502US
05

affected products (464)

Products and version ranges known to be affected.

showing 20 of 464
06

advisories (4)

Vendor and ecosystem advisories describing this.

  • NCSC-2026-0187Kwetsbaarheden verholpen in Siemens productenNL2026-06-09csaf · ncsc_nlNL

    Siemens heeft kwetsbaarheden verholpen in diverse producten als SCALANCE, SIMATIC, SINAMICS, SIPROTEC en TIA Portal.

  • SSA-693808SSA-693808: Deserialization Vulnerability in Siemens Engineering Platforms2025-08-12csaf · siemens_psirtDE

    Affected products do not properly restrict access permissions to a local Windows Named Pipe and do not properly sanitize user-controllable input sent to that Named Pipe. This could allow a local authenticated attacker to cause a type confusion and execute arbitrary code within the affected application and its privileges. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

  • WID-SEC-W-2025-1769Siemens SIMATIC S7: Mehrere Schwachstellen ermöglichen CodeausführungDeutsch2025-08-12csaf · cert_bundDE

    Ein lokaler Angreifer kann mehrere Schwachstellen in Siemens SIMATIC S7 ausnutzen, um beliebigen Programmcode auszuführen.

  • ICSA-25-226-03Siemens Engineering Platforms2025-08-12icsa · cisa_csaf_otUS

    Affected products do not properly restrict access permissions to a local Windows Named Pipe and do not properly sanitize user-controllable input sent to that Named Pipe. This could allow a local authenticated attacker to cause a type confusion and execute arbitrary code within the affected application and its privileges. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

07

also known as (4)

Other names and identifiers for this entity.

08

sources

Which sources assert this record, and when.

cnnvdenisa_euvdfstec_bducert_bundcisa_csaf_otncsc_nlsiemens_psirtNVDCVE.orgMITRE
published 2025-08-12modified 2026-10-13
09

references (5)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan