Skip to content
OpenAdvisories
High SSA-493396 1 CVE

SSA-493396: Deserialization Vulnerability in Siemens Engineering Platforms

Published Aug 12, 2025 · Updated Nov 10, 2026 · Revision 5

Vendor: Siemens Product: SIMATIC S7-PLCSIM V17 Product: SIMATIC STEP 7 V17 Product: SIMATIC STEP 7 V18 Product: SIMATIC STEP 7 V19 Product: SIMATIC STEP 7 V20 Product: SIMATIC WinCC V17 Product: SIMATIC WinCC V18 Product: SIMATIC WinCC V19 Product: SIMATIC WinCC V20 Product: SIMOCODE ES V17 Product: SIMOCODE ES V18 Product: SIMOCODE ES V19 Product: SIMOCODE ES V20 Product: SIMOTION SCOUT TIA V5.4 Product: SIMOTION SCOUT TIA V5.5 Product: SIMOTION SCOUT TIA V5.6 Product: SIMOTION SCOUT TIA V5.7 Product: SINAMICS Startdrive V17 Product: SINAMICS Startdrive V18 Product: SINAMICS Startdrive V19 Product: SINAMICS Startdrive V20 Product: SIRIUS Safety ES V17 (TIA Portal) Product: SIRIUS Safety ES V18 (TIA Portal) Product: SIRIUS Safety ES V19 (TIA Portal) Product: SIRIUS Safety ES V20 (TIA Portal) Product: SIRIUS Soft Starter ES V17 (TIA Portal) Product: SIRIUS Soft Starter ES V18 (TIA Portal) Product: SIRIUS Soft Starter ES V19 (TIA Portal) Product: SIRIUS Soft Starter ES V20 (TIA Portal) +4 more

Summary

Affected products do not properly sanitize user-controllable input when parsing project files. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application.

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 1

Revision history

  1. #5

    Added fix for TIA Portal Cloud V17 and TIA Portal Cloud V18

  2. #4

    Added fix version for SIMATIC STEP 7 V18, and SIMATIC WinCC V18

  3. #3

    Added fix for Totally Integrated Automation Portal (TIA Portal) V17

  4. #2

    Added fix for TIA Portal V20

  5. #1

    Publication Date

References