A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All…

published 2025-08-12 14 mo ago modified 2026-10-13 27 d ago also EUVD-2024-54862

cvss: 8.2; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.2%; EPSS 0.2% chance of exploitation in 30 days, percentile 8%
public exploits: 0; none known

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), SIMATIC S7-PLCSIM V17 (All versions), SIMATIC STEP 7 V17 (All versions < V17 Update 9), SIMATIC STEP 7 V18 (All versions < V18 Update 6), SIMATIC STEP 7 V19 (All versions < V19 Update 4), SIMATIC STEP 7 V20 (All versions < V20 Update 4), SIMATIC WinCC V17 (All versions < V17 Update 9), SIMATIC WinCC V18 (All versions < V18 Update 6), SIMATIC WinCC V19 (All versions < V19 Update 4), SIMATIC WinCC V20 (All versions < V20 Update 4), SIMOCODE ES V17 (All versions), SIMOCODE ES V18 (All versions), SIMOCODE ES V19 (All versions), SIMOCODE ES V20 (All versions), SIMOTION SCOUT TIA V5.4 (All versions), SIMOTION SCOUT TIA V5.5 (All versions), SIMOTION SCOUT TIA V5.6 (All versions < V5.6 SP1 HF7), SIMOTION SCOUT TIA V5.7 (All versions), SINAMICS Startdrive V17 (All versions), SINAMICS Startdrive V18 (All versions), SINAMICS Startdrive V19 (All versions), SINAMICS Startdrive V20 (All versions), SIRIUS Safety ES V17 (TIA Portal) (All versions), SIRIUS Safety ES V18 (TIA Portal) (All versions), SIRIUS Safety ES V19 (TIA Portal) (All versions), SIRIUS Safety ES V20 (TIA Portal) (All versions), SIRIUS Soft Starter ES V17 (TIA Portal) (All versions), SIRIUS Soft Starter ES V18 (TIA Portal) (All versions), SIRIUS Soft Starter ES V19 (TIA Portal) (All versions), SIRIUS Soft Starter ES V20 (TIA Portal) (All versions), TIA Portal Cloud V17 (All versions), TIA Portal Cloud V18 (All versions < V6.3.0.2), TIA Portal Cloud V19 (All versions < V5.2.1.1), TIA Portal Cloud V20 (All versions < V5.2.2.2), TIA Portal Test Suite V20 (All versions < V20 Update 4). Affected products do not properly sanitize Interprocess Communication input received through a Windows Named Pipe accessible to all local users. This could allow an authenticated local attacker to cause a type confusion and execute arbitrary code within the affected application.

Patch / fix

fixed in 14

Siemens SIMATIC PCS neo V6.0 V6.0 SP1 Update 1
Siemens SIMATIC STEP 7 V17 V17 Update 9
Siemens SIMATIC STEP 7 V18 V18 Update 6
Siemens SIMATIC STEP 7 V19 V19 Update 4
Siemens SIMATIC STEP 7 V20 V20 Update 4
Siemens SIMATIC WinCC V17 V17 Update 9
Siemens SIMATIC WinCC V18 V18 Update 6
Siemens SIMATIC WinCC V19 V19 Update 4
Siemens SIMATIC WinCC V20 V20 Update 4
Siemens SIMOTION SCOUT TIA V5.6 V5.6 SP1 HF7
Siemens TIA Portal Cloud V18 V6.3.0.2
Siemens TIA Portal Cloud V19 V5.2.1.1
Siemens TIA Portal Cloud V20 V5.2.2.2
Siemens TIA Portal Test Suite V20 V20 Update 4

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-25-226-03 updated 2026-07-07 cvss 8.2

Siemens Engineering Platforms

Siemens SIMATIC PCS neo V4.1 Siemens SIMATIC PCS neo V5.0
affected: mitigation, no fix planned
Siemens SIMATIC PCS neo V6.0 < 6.0.1.1
affected: fixed in V6.0, mitigation support.industry.siemens.com
Siemens SIMATIC S7-PLCSIM V17
affected: mitigation, no fix planned
Siemens SIMATIC STEP 7 V17 < 17.0.9
affected: fixed in V17, mitigation support.industry.siemens.com
Siemens SIMATIC STEP 7 V18
affected: mitigation, no fix available
Siemens SIMATIC STEP 7 V19 < 19.0.4
affected: fixed in V19, mitigation support.industry.siemens.com
Siemens SIMATIC STEP 7 V20 < 20.0.4
affected: fixed in V20, mitigation support.industry.siemens.com
Siemens SIMATIC WinCC V17 < 17.0.9
affected: fixed in V17, mitigation support.industry.siemens.com

show 17 more

Siemens SIMATIC WinCC V18
affected: mitigation, no fix available
Siemens SIMATIC WinCC V19 < 19.0.4
affected: fixed in V19, mitigation support.industry.siemens.com
Siemens SIMATIC WinCC V20 < 20.0.4
affected: fixed in V20, mitigation support.industry.siemens.com
Siemens SIMOCODE ES V17
affected: mitigation, no fix available
Siemens SIMOCODE ES V18
affected: vendor fix, mitigation
Siemens SIMOCODE ES V19 Siemens SIMOCODE ES V20
affected: mitigation, no fix available
Siemens SIMOTION SCOUT TIA V5.4 Siemens SIMOTION SCOUT TIA V5.5
affected: vendor fix, mitigation
Siemens SIMOTION SCOUT TIA V5.6 < 5.6.1.7
affected: fixed in V5.6, mitigation support.industry.siemens.com
Siemens SIMOTION SCOUT TIA V5.7
affected: mitigation, no fix available
Siemens SINAMICS Startdrive V17 Siemens SINAMICS Startdrive V18
affected: vendor fix, mitigation
Siemens SINAMICS Startdrive V19 Siemens SINAMICS Startdrive V20 Siemens SIRIUS Safety ES V17 (TIA Portal)
affected: mitigation, no fix available
Siemens SIRIUS Safety ES V18 (TIA Portal)
affected: vendor fix, mitigation
Siemens SIRIUS Safety ES V19 (TIA Portal) Siemens SIRIUS Safety ES V20 (TIA Portal) Siemens SIRIUS Soft Starter ES V17 (TIA Portal)
affected: mitigation, no fix available
Siemens SIRIUS Soft Starter ES V18 (TIA Portal)
affected: vendor fix, mitigation
Siemens SIRIUS Soft Starter ES V19 (TIA Portal) Siemens SIRIUS Soft Starter ES V20 (TIA Portal) Siemens TIA Portal Cloud V17 Siemens TIA Portal Cloud V18
affected: mitigation, no fix available
Siemens TIA Portal Cloud V19 < 5.2.1.1 Siemens TIA Portal Cloud V20 < 5.2.2.2
affected: vendor fix, mitigation
Siemens TIA Portal Test Suite V20 < 20.0.4
affected: fixed in V20, mitigation support.industry.siemens.com

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

CISA SSVC

Exploitation: none
Automatable: no
Technical impact: total
Assessed: 14 mo ago (2025-08-12)

Exploit prediction

0.18% chance of exploitation in the next 30 days, higher than 8% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
CNA	3.1	8.2	CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
CNA	4.0	8.6	CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CNA	4.0	8.6	CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affected products

Siemens SIMATIC PCS neo V4.1
Siemens SIMATIC PCS neo V5.0
Siemens SIMATIC PCS neo V6.0
Siemens SIMATIC S7-PLCSIM V17
Siemens SIMATIC STEP 7 V17
Siemens SIMATIC STEP 7 V18
Siemens SIMATIC STEP 7 V19
Siemens SIMATIC STEP 7 V20
Siemens SIMATIC WinCC V17
Siemens SIMATIC WinCC V18
Siemens SIMATIC WinCC V19
Siemens SIMATIC WinCC V20
Siemens SIMOCODE ES V17
Siemens SIMOCODE ES V18
Siemens SIMOCODE ES V19
Siemens SIMOCODE ES V20
Siemens SIMOTION SCOUT TIA V5.4
Siemens SIMOTION SCOUT TIA V5.5
Siemens SIMOTION SCOUT TIA V5.6
Siemens SIMOTION SCOUT TIA V5.7
Siemens SINAMICS Startdrive V17
Siemens SINAMICS Startdrive V18
Siemens SINAMICS Startdrive V19
Siemens SINAMICS Startdrive V20
Siemens SIRIUS Safety ES V17 (TIA Portal)
Siemens SIRIUS Safety ES V18 (TIA Portal)
Siemens SIRIUS Safety ES V19 (TIA Portal)
Siemens SIRIUS Safety ES V20 (TIA Portal)
Siemens SIRIUS Soft Starter ES V17 (TIA Portal)
Siemens SIRIUS Soft Starter ES V18 (TIA Portal)
Siemens SIRIUS Soft Starter ES V19 (TIA Portal)
Siemens SIRIUS Soft Starter ES V20 (TIA Portal)
Siemens TIA Portal Cloud V17
Siemens TIA Portal Cloud V18
Siemens TIA Portal Cloud V19
Siemens TIA Portal Cloud V20
Siemens TIA Portal Test Suite V20

Classification

Weakness

CWE-502 Deserialization of Untrusted Data

References

cert-portal.siemens.com /productcert/html/ssa-693808.html

Sources

CVE List CVE-2024-54678
NVD CVE-2024-54678

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary