CVE-2024-52051: SIMATIC S7-PLCSIM V17 0 to before *; +33 more affected products

Affected technology

SIMATIC S7-PLCSIM V17 · 0 to before *
Siemens

SIMATIC S7-PLCSIM V18 · 0 to before *
Siemens

SIMATIC STEP 7 Safety V17 · 0 to before V17 Update 9
Siemens

SIMATIC STEP 7 Safety V18 · 0 to before V18 Update 6
Siemens

SIMATIC STEP 7 Safety V19 · 0 to before V19 Update 4
Siemens

SIMATIC STEP 7 V17 · 0 to before V17 Update 9
Siemens

SIMATIC STEP 7 V18 · 0 to before V18 Update 6
Siemens

SIMATIC STEP 7 V19 · 0 to before V19 Update 4
Siemens

SIMATIC WinCC Unified PC Runtime V18 · 0 to before *
Siemens

SIMATIC WinCC Unified PC Runtime V19 · 0 to before V19 Update 4
Siemens

SIMATIC WinCC Unified V17 · 0 to before V17 Update 9
Siemens

SIMATIC WinCC Unified V18 · 0 to before V18 Update 6
Siemens

SIMATIC WinCC Unified V19 · 0 to before V19 Update 4
Siemens

SIMATIC WinCC V17 · 0 to before V17 Update 9
Siemens

SIMATIC WinCC V18 · 0 to before V18 Update 6
Siemens

SIMATIC WinCC V19 · 0 to before V19 Update 4
Siemens

SIMOCODE ES V17 · 0 to before *
Siemens

SIMOCODE ES V18 · 0 to before *
Siemens

SIMOCODE ES V19 · 0 to before *
Siemens

SIMOTION SCOUT TIA V5.4 · 0 to before *
Siemens

SIMOTION SCOUT TIA V5.5 · 0 to before *
Siemens

SIMOTION SCOUT TIA V5.6 · 0 to before V5.6 SP1 HF7
Siemens

SINAMICS Startdrive V17 · 0 to before *
Siemens

SINAMICS Startdrive V18 · 0 to before *
Siemens

SINAMICS Startdrive V19 · 0 to before *
Siemens

SIRIUS Safety ES V17 (TIA Portal) · 0 to before *
Siemens

SIRIUS Safety ES V18 (TIA Portal) · 0 to before *
Siemens

SIRIUS Safety ES V19 (TIA Portal) · 0 to before *
Siemens

SIRIUS Soft Starter ES V17 (TIA Portal) · 0 to before *
Siemens

SIRIUS Soft Starter ES V18 (TIA Portal) · 0 to before *
Siemens

SIRIUS Soft Starter ES V19 (TIA Portal) · 0 to before *
Siemens

TIA Portal Cloud V17 · 0 to before *
Siemens

TIA Portal Cloud V18 · 0 to before *
Siemens

TIA Portal Cloud V19 · 0 to before V5.2.1.1
Siemens

Description’s affected range: versions), SIMATIC S7-PLCSIM V18 (All versions), SIMATIC STEP 7 Safety V17 (All versions < V17 Update 9), SIMATIC STEP 7 Safety V18 (All versions < V18 U

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Local · Low privileges required · Passive user interaction

What an attacker can do

An attacker could locally execute arbitrary commands in the host operating system with the privileges of the user. Vendor/CNA’s CVSS 4.0 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high.