Skip to content
Fencer Vulns
high 7.3

CVE-2024-52051 json

A vulnerability has been identified in SIMATIC S7-PLCSIM V17 (All versions), SIMATIC S7-PLCSIM V18 (All versions), SIMATIC STEP 7 Safety V1…

published 2024-12-10 22 mo ago modified 2026-10-13 26 d ago also EUVD-2024-46099

cvss
7.3
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.2%
EPSS 0.2% chance of exploitation in 30 days, percentile 7%
public exploits
0
none known

Summary

A vulnerability has been identified in SIMATIC S7-PLCSIM V17 (All versions), SIMATIC S7-PLCSIM V18 (All versions), SIMATIC STEP 7 Safety V17 (All versions < V17 Update 9), SIMATIC STEP 7 Safety V18 (All versions < V18 Update 6), SIMATIC STEP 7 Safety V19 (All versions < V19 Update 4), SIMATIC STEP 7 V17 (All versions < V17 Update 9), SIMATIC STEP 7 V18 (All versions < V18 Update 6), SIMATIC STEP 7 V19 (All versions < V19 Update 4), SIMATIC WinCC Unified PC Runtime V18 (All versions), SIMATIC WinCC Unified PC Runtime V19 (All versions < V19 Update 4), SIMATIC WinCC Unified V17 (All versions < V17 Update 9), SIMATIC WinCC Unified V18 (All versions < V18 Update 6), SIMATIC WinCC Unified V19 (All versions < V19 Update 4), SIMATIC WinCC V17 (All versions < V17 Update 9), SIMATIC WinCC V18 (All versions < V18 Update 6), SIMATIC WinCC V19 (All versions < V19 Update 4), SIMOCODE ES V17 (All versions), SIMOCODE ES V18 (All versions), SIMOCODE ES V19 (All versions), SIMOTION SCOUT TIA V5.4 (All versions), SIMOTION SCOUT TIA V5.5 (All versions), SIMOTION SCOUT TIA V5.6 (All versions < V5.6 SP1 HF7), SINAMICS Startdrive V17 (All versions), SINAMICS Startdrive V18 (All versions), SINAMICS Startdrive V19 (All versions), SIRIUS Safety ES V17 (TIA Portal) (All versions), SIRIUS Safety ES V18 (TIA Portal) (All versions), SIRIUS Safety ES V19 (TIA Portal) (All versions), SIRIUS Soft Starter ES V17 (TIA Portal) (All versions), SIRIUS Soft Starter ES V18 (TIA Portal) (All versions), SIRIUS Soft Starter ES V19 (TIA Portal) (All versions), TIA Portal Cloud V17 (All versions), TIA Portal Cloud V18 (All versions), TIA Portal Cloud V19 (All versions < V5.2.1.1). The affected devices do not properly sanitize user-controllable input when parsing user settings. This could allow an attacker to locally execute arbitrary commands in the host operating system with the privileges of the user.

Patch / fix

  • Siemens SIMATIC STEP 7 Safety V17 V17 Update 9
  • Siemens SIMATIC STEP 7 Safety V18 V18 Update 6
  • Siemens SIMATIC STEP 7 Safety V19 V19 Update 4
  • Siemens SIMATIC STEP 7 V17 V17 Update 9
  • Siemens SIMATIC STEP 7 V18 V18 Update 6
  • Siemens SIMATIC STEP 7 V19 V19 Update 4
  • Siemens SIMATIC WinCC Unified PC Runtime V19 V19 Update 4
  • Siemens SIMATIC WinCC Unified V17 V17 Update 9
  • Siemens SIMATIC WinCC Unified V18 V18 Update 6
  • Siemens SIMATIC WinCC Unified V19 V19 Update 4
  • Siemens SIMATIC WinCC V17 V17 Update 9
  • Siemens SIMATIC WinCC V18 V18 Update 6
  • Siemens SIMATIC WinCC V19 V19 Update 4
  • Siemens SIMOTION SCOUT TIA V5.6 V5.6 SP1 HF7
  • Siemens TIA Portal Cloud V19 V5.2.1.1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-24-347-02 updated cvss 7.3

Siemens Engineering Platforms

  • Siemens SIMATIC S7-PLCSIM V17 Siemens SIMATIC S7-PLCSIM V18
    affected: no fix available
  • Siemens SIMATIC STEP 7 Safety V17 <V17_Update_9
    affected: fixed in V17 support.industry.siemens.com
  • Siemens SIMATIC STEP 7 Safety V18
    affected: no fix available
  • Siemens SIMATIC STEP 7 Safety V19 <V19_Update_4
    affected: fixed in V19 support.industry.siemens.com
  • Siemens SIMATIC STEP 7 V17 <V17_Update_9
    affected: fixed in V17 support.industry.siemens.com
  • Siemens SIMATIC STEP 7 V18
    affected: no fix available
  • Siemens SIMATIC STEP 7 V19 <V19_Update_4
    affected: fixed in V19 support.industry.siemens.com
  • Siemens SIMATIC WinCC Unified PC Runtime V18
    affected: no fix available
show 11 more
  • Siemens SIMATIC WinCC Unified PC Runtime V19 <V19_Update_4
    affected: fixed in V19 support.industry.siemens.com
  • Siemens SIMATIC WinCC Unified V17 <V17_Update_9
    affected: fixed in V17 support.industry.siemens.com
  • Siemens SIMATIC WinCC Unified V18
    affected: no fix available
  • Siemens SIMATIC WinCC Unified V19 <V19_Update_4
    affected: fixed in V19 support.industry.siemens.com
  • Siemens SIMATIC WinCC V17 <V17_Update_9
    affected: fixed in V17 support.industry.siemens.com
  • Siemens SIMATIC WinCC V18
    affected: no fix available
  • Siemens SIMATIC WinCC V19 <V19_Update_4
    affected: fixed in V19 support.industry.siemens.com
  • Siemens SIMOCODE ES V17 Siemens SIMOCODE ES V18 Siemens SIMOCODE ES V19 Siemens SIMOTION SCOUT TIA V5.4 Siemens SIMOTION SCOUT TIA V5.5
    affected: no fix available
  • Siemens SIMOTION SCOUT TIA V5.6 <V5.6_SP1_HF7
    affected: fixed in V5.6 support.industry.siemens.com
  • Siemens SINAMICS Startdrive V17 Siemens SINAMICS Startdrive V18 Siemens SINAMICS Startdrive V19 Siemens SIRIUS Safety ES V17 (TIA Portal) Siemens SIRIUS Safety ES V18 (TIA Portal) Siemens SIRIUS Safety ES V19 (TIA Portal)
    +5 more products
    Siemens SIRIUS Soft Starter ES V17 (TIA Portal) Siemens SIRIUS Soft Starter ES V18 (TIA Portal) Siemens SIRIUS Soft Starter ES V19 (TIA Portal) Siemens TIA Portal Cloud V17 Siemens TIA Portal Cloud V18
    affected: no fix available
  • Siemens TIA Portal Cloud V19 < 5.2.1.1
    affected: vendor fix

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
22 mo ago

Exploit prediction

0.18% chance of exploitation in the next 30 days, higher than 7% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
CNA 4.0 7.0 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CNA 4.0 7.0 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CNA 3.1 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Affected products

  • Siemens SIMATIC S7-PLCSIM V17
  • Siemens SIMATIC S7-PLCSIM V18
  • Siemens SIMATIC STEP 7 Safety V17
  • Siemens SIMATIC STEP 7 Safety V18
  • Siemens SIMATIC STEP 7 Safety V19
  • Siemens SIMATIC STEP 7 V17
  • Siemens SIMATIC STEP 7 V18
  • Siemens SIMATIC STEP 7 V19
  • Siemens SIMATIC WinCC Unified PC Runtime V18
  • Siemens SIMATIC WinCC Unified PC Runtime V19
  • Siemens SIMATIC WinCC Unified V17
  • Siemens SIMATIC WinCC Unified V18
  • Siemens SIMATIC WinCC Unified V19
  • Siemens SIMATIC WinCC V17
  • Siemens SIMATIC WinCC V18
  • Siemens SIMATIC WinCC V19
  • Siemens SIMOCODE ES V17
  • Siemens SIMOCODE ES V18
  • Siemens SIMOCODE ES V19
  • Siemens SIMOTION SCOUT TIA V5.4
  • Siemens SIMOTION SCOUT TIA V5.5
  • Siemens SIMOTION SCOUT TIA V5.6
  • Siemens SINAMICS Startdrive V17
  • Siemens SINAMICS Startdrive V18
  • Siemens SINAMICS Startdrive V19
  • Siemens SIRIUS Safety ES V17 (TIA Portal)
  • Siemens SIRIUS Safety ES V18 (TIA Portal)
  • Siemens SIRIUS Safety ES V19 (TIA Portal)
  • Siemens SIRIUS Soft Starter ES V17 (TIA Portal)
  • Siemens SIRIUS Soft Starter ES V18 (TIA Portal)
  • Siemens SIRIUS Soft Starter ES V19 (TIA Portal)
  • Siemens TIA Portal Cloud V17
  • Siemens TIA Portal Cloud V18
  • Siemens TIA Portal Cloud V19

Classification

Weakness
  • CWE-20 Improper Input Validation

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.