Simatic Step 7 vulnerabilities

3 known vulnerabilities in Simatic Step 7 from Siemens. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  SIMATIC S7-PLCSIM V16: Deserialization of Untrusted Data

  CVE-2023-32736Nov 12, 2024Siemens

  A vulnerability has been identified in SIMATIC S7-PLCSIM V16 (All versions), SIMATIC S7-PLCSIM V17 (All versions), SIMATIC STEP 7 Safety V16 (All versions), SIMATIC STEP 7 Safety V17 (All versions < V17 Update 8), SIMATIC STEP 7 Safety V18 (All versions < V18

• 7.8 High severity

  SIMATIC PCS neo V4.0: Deserialization of Untrusted Data

  CVE-2022-45147Jul 9, 2024Siemens

  A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC STEP 7 V16 (All versions), SIMATIC STEP 7 V17 (All versions), SIMATIC STEP 7 V18 (All versions < V18 Update 2). Affected applications do not properly restrict the .NET BinaryFo

• 8.8 High severity

  SIMATIC PCS 7: Improper Control of Generation of Code

  CVE-2023-25910Jun 13, 2023SiemensEPSS 1%

  A vulnerability has been identified in SIMATIC PCS 7 (All versions < V9.1 SP2 UC04), SIMATIC S7-PM (All versions < V5.7 SP1 HF1), SIMATIC S7-PM (All versions < V5.7 SP2 HF1), SIMATIC STEP 7 V5 (All versions < V5.7). The affected product contains a database man