Description
A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 2), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1), SIMOCODE ES V19 (All versions < V19 Update 1), SIRIUS Safety ES V19 (TIA Portal) (All versions < V19 Update 1), SIRIUS Soft Starter ES V19 (TIA Portal) (All versions < V19 Update 1), TIA Administrator (All versions < V3.0.4). Affected products do not correctly invalidate user sessions upon user logout. This could allow a remote unauthenticated attacker, who has obtained the session token by other means, to re-use a legitimate user's session even after logout.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SIMATIC PCS neo V4.0 | — | — |
| Siemens | SIMATIC PCS neo V4.1 | < V4.1 Update 2 | V4.1 Update 2 |
| Siemens | SIMATIC PCS neo V5.0 | < V5.0 Update 1 | V5.0 Update 1 |
| Siemens | SIMOCODE ES V19 | < V19 Update 1 | V19 Update 1 |
| Siemens | SIRIUS Safety ES V19 (TIA Portal) | < V19 Update 1 | V19 Update 1 |
| Siemens | SIRIUS Soft Starter ES V19 (TIA Portal) | < V19 Update 1 | V19 Update 1 |
| Siemens | TIA Administrator | < V3.0.4 | V3.0.4 |
Advisories 5
- ICSA-25-044-13 Siemens SIMATIC PCS neo, TIA Administrator, and TIA Portal CISA ICS & IT advisories · May 6, 2025
- NCSC-2025-0061 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Feb 14, 2025
- NCSC-2025-0051 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Feb 11, 2025
- SSA-342348 SSA-342348: Insufficient Session Expiration Vulnerability in Siemens Products Siemens ProductCERT · Feb 11, 2025
- WID-SEC-2025-0311 Siemens TIA Portal: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Feb 10, 2025