Skip to content
OpenAdvisories
High SSA-871035 1 CVE

SSA-871035: Session-Memory Deserialization Vulnerability in Siemens Engineering Platforms Before V19

Published Nov 12, 2024 · Updated Jan 14, 2025 · Revision 2

Vendor: Siemens Product: SIMATIC S7-PLCSIM V16 Product: SIMATIC S7-PLCSIM V17 Product: SIMATIC STEP 7 Safety V16 Product: SIMATIC STEP 7 Safety V17 Product: SIMATIC STEP 7 Safety V18 Product: SIMATIC STEP 7 V16 Product: SIMATIC STEP 7 V17 Product: SIMATIC STEP 7 V18 Product: SIMATIC WinCC Unified V16 Product: SIMATIC WinCC Unified V17 Product: SIMATIC WinCC Unified V18 Product: SIMATIC WinCC V16 Product: SIMATIC WinCC V17 Product: SIMATIC WinCC V18 Product: SIMOCODE ES V16 Product: SIMOCODE ES V17 Product: SIMOCODE ES V18 Product: SIMOTION SCOUT TIA V5.4 SP1 Product: SIMOTION SCOUT TIA V5.4 SP3 Product: SIMOTION SCOUT TIA V5.5 SP1 Product: SINAMICS Startdrive V16 Product: SINAMICS Startdrive V17 Product: SINAMICS Startdrive V18 Product: SIRIUS Safety ES V17 (TIA Portal) Product: SIRIUS Safety ES V18 (TIA Portal) Product: SIRIUS Soft Starter ES V17 (TIA Portal) Product: SIRIUS Soft Starter ES V18 (TIA Portal) Product: TIA Portal Cloud V16 Product: TIA Portal Cloud V17 +1 more

Summary

Affected products do not properly sanitize user-controllable input when parsing files. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application.

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 1

Revision history

  1. #2

    Clarified no fix planned for Totally Integrated Automation Portal (TIA Portal) V16

  2. #1

    Publication Date

References