Skip to content
fr Sign in
7.4 High

CVE-2026-54429 A vulnerability has been identified in SIMATIC S7-PLCSIM Advanced (All versions)

Description

A vulnerability has been identified in SIMATIC S7-PLCSIM Advanced (All versions). Affected devices do not properly handle high-volume multicast network traffic, which can exhaust available memory resources in the affected application. This could allow an unauthenticated attacker on the local network segment to cause a denial-of-service condition of the affected application. The affected application becomes inaccessible and requires a manual restart; no project data is lost. Successful exploitation requires a specific project configuration to be already active on the targeted instance.

Affected products and versions

Product Affected versions Fixed in
SIMATIC S7-PLCSIM Advanced Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of SIMATIC S7-PLCSIM Advanced

The 33 CVEs of SIMATIC S7-PLCSIM Advanced →
CVE-2026-63357 Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before… 6.1 Medium CVE-2026-63356 Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including… 6.1 Medium CVE-2026-63355 Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in… 6.1 Medium CVE-2026-63354 Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before… 9.6 Critical
Track this CVE