7.4
Élevée
CVE-2026-54429 A vulnerability has been identified in SIMATIC S7-PLCSIM Advanced (All versions)
Description
A vulnerability has been identified in SIMATIC S7-PLCSIM Advanced (All versions). Affected devices do not properly handle high-volume multicast network traffic, which can exhaust available memory resources in the affected application. This could allow an unauthenticated attacker on the local network segment to cause a denial-of-service condition of the affected application. The affected application becomes inaccessible and requires a manual restart; no project data is lost. Successful exploitation requires a specific project configuration to be already active on the targeted instance.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SIMATIC S7-PLCSIM Advanced | Versions non publiées |
Références
- cert-portal.siemens.com cert-portal.siemens.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de SIMATIC S7-PLCSIM Advanced
Les 33 CVE de SIMATIC S7-PLCSIM Advanced →
CVE-2026-63357
Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before…
6.1
Moyenne
CVE-2026-63356
Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including…
6.1
Moyenne
CVE-2026-63355
Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in…
6.1
Moyenne
CVE-2026-63354
Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before…
9.6
Critique