CVE-2024-49849: SIMATIC S7-PLCSIM V16 0 to before *; +38 more affected products

Affected technology

SIMATIC S7-PLCSIM V16 · 0 to before *
Siemens

SIMATIC S7-PLCSIM V17 · 0 to before *
Siemens

SIMATIC STEP 7 Safety V16 · 0 to before *
Siemens

SIMATIC STEP 7 Safety V17 · 0 to before V17 Update 9
Siemens

SIMATIC STEP 7 Safety V18 · 0 to before V18 Update 6
Siemens

SIMATIC STEP 7 Safety V19 · 0 to before V19 Update 4
Siemens

SIMATIC STEP 7 V16 · 0 to before *
Siemens

SIMATIC STEP 7 V17 · 0 to before V17 Update 9
Siemens

SIMATIC STEP 7 V18 · 0 to before V18 Update 6
Siemens

SIMATIC STEP 7 V19 · 0 to before V19 Update 4
Siemens

SIMATIC WinCC Unified V16 · 0 to before *
Siemens

SIMATIC WinCC Unified V17 · 0 to before V17 Update 9
Siemens

SIMATIC WinCC Unified V18 · 0 to before V18 Update 6
Siemens

SIMATIC WinCC Unified V19 · 0 to before V19 Update 4
Siemens

SIMATIC WinCC V16 · 0 to before *
Siemens

SIMATIC WinCC V17 · 0 to before V17 Update 9
Siemens

SIMATIC WinCC V18 · 0 to before V18 Update 6
Siemens

SIMATIC WinCC V19 · 0 to before V19 Update 4
Siemens

SIMOCODE ES V16 · 0 to before *
Siemens

SIMOCODE ES V17 · 0 to before *
Siemens

SIMOCODE ES V18 · 0 to before *
Siemens

SIMOCODE ES V19 · 0 to before *
Siemens

SIMOTION SCOUT TIA V5.4 · 0 to before *
Siemens

SIMOTION SCOUT TIA V5.5 · 0 to before *
Siemens

SIMOTION SCOUT TIA V5.6 · 0 to before V5.6 SP1 HF7
Siemens

SINAMICS Startdrive V16 · 0 to before *
Siemens

SINAMICS Startdrive V17 · 0 to before *
Siemens

SINAMICS Startdrive V18 · 0 to before *
Siemens

SINAMICS Startdrive V19 · 0 to before *
Siemens

SIRIUS Safety ES V17 (TIA Portal) · 0 to before *
Siemens

SIRIUS Safety ES V18 (TIA Portal) · 0 to before V18 Update 6
Siemens

SIRIUS Safety ES V19 (TIA Portal) · 0 to before *
Siemens

SIRIUS Soft Starter ES V17 (TIA Portal) · 0 to before *
Siemens

SIRIUS Soft Starter ES V18 (TIA Portal) · 0 to before *
Siemens

SIRIUS Soft Starter ES V19 (TIA Portal) · 0 to before *
Siemens

TIA Portal Cloud V16 · 0 to before *
Siemens

TIA Portal Cloud V17 · 0 to before *
Siemens

TIA Portal Cloud V18 · 0 to before V6.3.0.2
Siemens

TIA Portal Cloud V19 · 0 to before V5.2.1.1
Siemens

Description’s affected range: versions), SIMATIC S7-PLCSIM V17 (All versions), SIMATIC STEP 7 Safety V16 (All versions), SIMATIC STEP 7 Safety V17 (All versions < V17 Update 9), SIMAT

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Local · No privileges required · Active user interaction

What an attacker can do

An attacker could cause a type confusion and execute arbitrary code within the affected application. Vendor/CNA’s CVSS 4.0 assessment (base score 8.4/10) rates confidentiality, integrity and availability impact as high.