Skip to content
OpenAdvisories
High SSA-693808 1 CVE

SSA-693808: Deserialization Vulnerability in Siemens Engineering Platforms

Published Aug 12, 2025 · Updated Nov 10, 2026 · Revision 6

Vendor: Siemens Product: SIMATIC PCS neo V4.1 Product: SIMATIC PCS neo V5.0 Product: SIMATIC PCS neo V6.0 Product: SIMATIC S7-PLCSIM V17 Product: SIMATIC STEP 7 V17 Product: SIMATIC STEP 7 V18 Product: SIMATIC STEP 7 V19 Product: SIMATIC STEP 7 V20 Product: SIMATIC WinCC V17 Product: SIMATIC WinCC V18 Product: SIMATIC WinCC V19 Product: SIMATIC WinCC V20 Product: SIMOCODE ES V17 Product: SIMOCODE ES V18 Product: SIMOCODE ES V19 Product: SIMOCODE ES V20 Product: SIMOTION SCOUT TIA V5.4 Product: SIMOTION SCOUT TIA V5.5 Product: SIMOTION SCOUT TIA V5.6 Product: SIMOTION SCOUT TIA V5.7 Product: SINAMICS Startdrive V17 Product: SINAMICS Startdrive V18 Product: SINAMICS Startdrive V19 Product: SINAMICS Startdrive V20 Product: SIRIUS Safety ES V17 (TIA Portal) Product: SIRIUS Safety ES V18 (TIA Portal) Product: SIRIUS Safety ES V19 (TIA Portal) Product: SIRIUS Safety ES V20 (TIA Portal) Product: SIRIUS Soft Starter ES V17 (TIA Portal) +8 more

Summary

Affected products do not properly restrict access permissions to a local Windows Named Pipe and do not properly sanitize user-controllable input sent to that Named Pipe. This could allow a local authenticated attacker to cause a type confusion and execute arbitrary code within the affected application and its privileges.

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 1

Revision history

  1. #6

    Added fix for TIA Portal Cloud V17, SIMOTION SCOUT TIA V5.4, SIMOTION SCOUT TIA V5.5, SIMOTION SCOUT TIA V5.7 and updated the fix version for SIMOTION SCOUT TIA V5.6

  2. #5

    Added fix version for SIMATIC STEP 7 V18, TIA Portal Cloud V18 and SIMATIC WinCC V18

  3. #4

    Added fix for SIMATIC PCS NEO V6.0

  4. #3

    Added fix for Totally Integrated Automation Portal (TIA Portal) V17

  5. #2

    Added no fix expected for PCS neo V5.0, added fix for TIA Portal V20

  6. #1

    Publication Date

References