SIMATIC S7-PLCSIM Advanced vulnerabilities

4 known vulnerabilities in SIMATIC S7-PLCSIM Advanced from Siemens. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  SIMATIC S7-PLCSIM Advanced: Allocation of Resources Without Limits or Throttling

  CVE-2026-54429Jul 14, 2026Siemens

  A vulnerability has been identified in SIMATIC S7-PLCSIM Advanced (All versions). Affected devices do not properly handle high-volume multicast network traffic, which can exhaust available memory resources in the affected application. This could allow an unaut

• 7.5 High severity

  SIMATIC Drive Controller CPU 1504D TF: Use After Free

  CVE-2023-46156Dec 12, 2023SiemensEPSS 1.24%

  Affected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an attacker to create a denial of service condition. A restart is needed to restore normal operations.

• 7.5 High severity

  SIMATIC BRAUMAT: Integer Overflow or Wraparound

  CVE-2023-28831Sep 12, 2023SiemensEPSS 1.13%

  The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to creat

• 7.8 High severity

  SIMATIC Drive Controller family: Insufficiently Protected Credentials

  CVE-2022-38465Oct 11, 2022Siemens

  A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All