Vulnerability-Lookup

CNVD-2026-24199

Vulnerability from cnvd - Published: 2026-06-17

Title

多款Siemens产品代码问题漏洞（CNVD-2026-24199）

Description

Siemens SIMATIC WinCC等都是德国西门子（Siemens）公司的产品。Siemens SIMATIC WinCC是一套自动化的数据采集与监控（SCADA）系统。Siemens SIMATIC STEP是用于配置和编程 SIMATIC 控制器的综合工程工具。Siemens SIMATIC S7-PLCSIM V17是一款PLC程序仿真软件。多款Siemens产品存在代码问题漏洞，该漏洞源于输入清理不当，攻击者可利用该漏洞在受影响的应用程序中造成类型混淆并执行任意代码。

Severity

中

Patch Name

多款Siemens产品代码问题漏洞（CNVD-2026-24199）的补丁

Patch Description

Formal description

厂商已发布了漏洞修复程序，请及时关注更新： https://cert-portal.siemens.com/productcert/html/ssa-693808.html

Reference

https://cert-portal.siemens.com/productcert/html/ssa-693808.html

Impacted products

Name
['Siemens Totally Integrated Automation Portal (TIA Portal) V17', 'Siemens Totally Integrated Automation Portal (TIA Portal) V18', 'Siemens SIMATIC PCS neo V4.1', 'Siemens SIMATIC PCS neo V5.0', 'Siemens Totally Integrated Automation Portal (TIA Portal) V19', 'Siemens SIMATIC S7-PLCSIM V17', 'SIEMENS SINAMICS Startdrive V20 all', 'SIEMENS SIRIUS Safety ES V17 (TIA Portal) all', 'SIEMENS SIRIUS Safety ES V18 (TIA Portal) all', 'SIEMENS SIRIUS Safety ES V19 (TIA Portal) all', 'SIEMENS SIRIUS Safety ES V20 (TIA Portal) all', 'SIEMENS SIRIUS Soft Starter ES V17 (TIA Portal) all', 'SIEMENS SIRIUS Soft Starter ES V18 (TIA Portal) all', 'SIEMENS SIRIUS Soft Starter ES V19 (TIA Portal) all', 'SIEMENS SIRIUS Soft Starter ES V20 (TIA Portal) all', 'Siemens TIA Portal Cloud V17 all', 'Siemens TIA Portal Cloud V18 all', 'SIEMENS TIA Portal Cloud V19 <V5.2.1.1', 'SIEMENS TIA Portal Cloud V20 all', 'Siemens SIMATIC PCS neo V4.1 all', 'Siemens SIMATIC PCS neo V5.0 all', 'SIEMENS SIMATIC PCS neo V6.0 all', 'SIEMENS TIA Portal Test Suite V20 all', 'Siemens SIMATIC PCS neo V6.0', 'Siemens Totally Integrated Automation Portal (TIA Portal) V20']

Name

['Siemens Totally Integrated Automation Portal (TIA Portal) V17', 'Siemens Totally Integrated Automation Portal (TIA Portal) V18', 'Siemens SIMATIC PCS neo V4.1', 'Siemens SIMATIC PCS neo V5.0', 'Siemens Totally Integrated Automation Portal (TIA Portal) V19', 'Siemens SIMATIC S7-PLCSIM V17', 'SIEMENS SINAMICS Startdrive V20 all', 'SIEMENS SIRIUS Safety ES V17 (TIA Portal) all', 'SIEMENS SIRIUS Safety ES V18 (TIA Portal) all', 'SIEMENS SIRIUS Safety ES V19 (TIA Portal) all', 'SIEMENS SIRIUS Safety ES V20 (TIA Portal) all', 'SIEMENS SIRIUS Soft Starter ES V17 (TIA Portal) all', 'SIEMENS SIRIUS Soft Starter ES V18 (TIA Portal) all', 'SIEMENS SIRIUS Soft Starter ES V19 (TIA Portal) all', 'SIEMENS SIRIUS Soft Starter ES V20 (TIA Portal) all', 'Siemens TIA Portal Cloud V17 all', 'Siemens TIA Portal Cloud V18 all', 'SIEMENS TIA Portal Cloud V19 <V5.2.1.1', 'SIEMENS TIA Portal Cloud V20 all', 'Siemens SIMATIC PCS neo V4.1 all', 'Siemens SIMATIC PCS neo V5.0 all', 'SIEMENS SIMATIC PCS neo V6.0 all', 'SIEMENS TIA Portal Test Suite V20 all', 'Siemens SIMATIC PCS neo V6.0', 'Siemens Totally Integrated Automation Portal (TIA Portal) V20']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2024-54678",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-54678"
    }
  },
  "description": "Siemens SIMATIC WinCC\u7b49\u90fd\u662f\u5fb7\u56fd\u897f\u95e8\u5b50\uff08Siemens\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Siemens SIMATIC WinCC\u662f\u4e00\u5957\u81ea\u52a8\u5316\u7684\u6570\u636e\u91c7\u96c6\u4e0e\u76d1\u63a7\uff08SCADA\uff09\u7cfb\u7edf\u3002Siemens SIMATIC STEP\u662f\u7528\u4e8e\u914d\u7f6e\u548c\u7f16\u7a0b SIMATIC \u63a7\u5236\u5668\u7684\u7efc\u5408\u5de5\u7a0b\u5de5\u5177\u3002Siemens SIMATIC S7-PLCSIM V17\u662f\u4e00\u6b3ePLC\u7a0b\u5e8f\u4eff\u771f\u8f6f\u4ef6\u3002 \n\n\u591a\u6b3eSiemens\u4ea7\u54c1\u5b58\u5728\u4ee3\u7801\u95ee\u9898\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u8f93\u5165\u6e05\u7406\u4e0d\u5f53\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u53d7\u5f71\u54cd\u7684\u5e94\u7528\u7a0b\u5e8f\u4e2d\u9020\u6210\u7c7b\u578b\u6df7\u6dc6\u5e76\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://cert-portal.siemens.com/productcert/html/ssa-693808.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2026-24199",
  "openTime": "2026-06-17",
  "patchDescription": "Siemens SIMATIC WinCC\u7b49\u90fd\u662f\u5fb7\u56fd\u897f\u95e8\u5b50\uff08Siemens\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Siemens SIMATIC WinCC\u662f\u4e00\u5957\u81ea\u52a8\u5316\u7684\u6570\u636e\u91c7\u96c6\u4e0e\u76d1\u63a7\uff08SCADA\uff09\u7cfb\u7edf\u3002Siemens SIMATIC STEP\u662f\u7528\u4e8e\u914d\u7f6e\u548c\u7f16\u7a0b SIMATIC \u63a7\u5236\u5668\u7684\u7efc\u5408\u5de5\u7a0b\u5de5\u5177\u3002Siemens SIMATIC S7-PLCSIM V17\u662f\u4e00\u6b3ePLC\u7a0b\u5e8f\u4eff\u771f\u8f6f\u4ef6\u3002 \r\n\r\n\u591a\u6b3eSiemens\u4ea7\u54c1\u5b58\u5728\u4ee3\u7801\u95ee\u9898\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u8f93\u5165\u6e05\u7406\u4e0d\u5f53\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u53d7\u5f71\u54cd\u7684\u5e94\u7528\u7a0b\u5e8f\u4e2d\u9020\u6210\u7c7b\u578b\u6df7\u6dc6\u5e76\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "\u591a\u6b3eSiemens\u4ea7\u54c1\u4ee3\u7801\u95ee\u9898\u6f0f\u6d1e\uff08CNVD-2026-24199\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Siemens Totally Integrated Automation Portal (TIA Portal) V17",
      "Siemens Totally Integrated Automation Portal (TIA Portal) V18",
      "Siemens SIMATIC PCS neo V4.1",
      "Siemens SIMATIC PCS neo V5.0",
      "Siemens Totally Integrated Automation Portal (TIA Portal) V19",
      "Siemens SIMATIC S7-PLCSIM V17",
      "SIEMENS SINAMICS Startdrive V20 all",
      "SIEMENS SIRIUS Safety ES V17 (TIA Portal) all",
      "SIEMENS SIRIUS Safety ES V18 (TIA Portal) all",
      "SIEMENS SIRIUS Safety ES V19 (TIA Portal) all",
      "SIEMENS SIRIUS Safety ES V20 (TIA Portal) all",
      "SIEMENS SIRIUS Soft Starter ES V17 (TIA Portal) all",
      "SIEMENS SIRIUS Soft Starter ES V18 (TIA Portal) all",
      "SIEMENS SIRIUS Soft Starter ES V19 (TIA Portal) all",
      "SIEMENS SIRIUS Soft Starter ES V20 (TIA Portal) all",
      "Siemens TIA Portal Cloud V17 all",
      "Siemens TIA Portal Cloud V18 all",
      "SIEMENS TIA Portal Cloud V19 \u003cV5.2.1.1",
      "SIEMENS TIA Portal Cloud V20 all",
      "Siemens SIMATIC PCS neo V4.1 all",
      "Siemens SIMATIC PCS neo V5.0 all",
      "SIEMENS SIMATIC PCS neo V6.0 all",
      "SIEMENS TIA Portal Test Suite V20 all",
      "Siemens SIMATIC PCS neo V6.0",
      "Siemens Totally Integrated Automation Portal (TIA Portal) V20"
    ]
  },
  "referenceLink": "https://cert-portal.siemens.com/productcert/html/ssa-693808.html",
  "serverity": "\u4e2d",
  "submitTime": "2025-08-20",
  "title": "\u591a\u6b3eSiemens\u4ea7\u54c1\u4ee3\u7801\u95ee\u9898\u6f0f\u6d1e\uff08CNVD-2026-24199\uff09"
}

CVE-2024-54678 (GCVE-0-2024-54678)

Vulnerability from cvelistv5 – Published: 2025-08-12 11:16 – Updated: 2026-06-09 08:46

Summary

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), SIMATIC S7-PLCSIM V17 (All versions), SIMATIC STEP 7 V17 (All versions < V17 Update 9), SIMATIC STEP 7 V18 (All versions), SIMATIC STEP 7 V19 (All versions < V19 Update 4), SIMATIC STEP 7 V20 (All versions < V20 Update 4), SIMATIC WinCC V17 (All versions < V17 Update 9), SIMATIC WinCC V18 (All versions), SIMATIC WinCC V19 (All versions < V19 Update 4), SIMATIC WinCC V20 (All versions < V20 Update 4), SIMOCODE ES V17 (All versions), SIMOCODE ES V18 (All versions), SIMOCODE ES V19 (All versions), SIMOCODE ES V20 (All versions), SIMOTION SCOUT TIA V5.4 (All versions), SIMOTION SCOUT TIA V5.5 (All versions), SIMOTION SCOUT TIA V5.6 (All versions < V5.6 SP1 HF7), SIMOTION SCOUT TIA V5.7 (All versions), SINAMICS Startdrive V17 (All versions), SINAMICS Startdrive V18 (All versions), SINAMICS Startdrive V19 (All versions), SINAMICS Startdrive V20 (All versions), SIRIUS Safety ES V17 (TIA Portal) (All versions), SIRIUS Safety ES V18 (TIA Portal) (All versions), SIRIUS Safety ES V19 (TIA Portal) (All versions), SIRIUS Safety ES V20 (TIA Portal) (All versions), SIRIUS Soft Starter ES V17 (TIA Portal) (All versions), SIRIUS Soft Starter ES V18 (TIA Portal) (All versions), SIRIUS Soft Starter ES V19 (TIA Portal) (All versions), SIRIUS Soft Starter ES V20 (TIA Portal) (All versions), TIA Portal Cloud V17 (All versions), TIA Portal Cloud V18 (All versions), TIA Portal Cloud V19 (All versions < V5.2.1.1), TIA Portal Cloud V20 (All versions < V5.2.2.2), TIA Portal Test Suite V20 (All versions < V20 Update 4). Affected products do not properly sanitize Interprocess Communication input received through a Windows Named Pipe accessible to all local users. This could allow an authenticated local attacker to cause a type confusion and execute arbitrary code within the affected application.

Severity ?

8.2 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

8.6 (High)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

CWE

CWE-502 - Deserialization of Untrusted Data

Assigner

siemens

References

URL

Tags

https://cert-portal.siemens.com/productcert/html/…

Impacted products

Vendor

Product

Version

Siemens

SIMATIC PCS neo V4.1

Affected: 0 , < * (custom)

Siemens	SIMATIC PCS neo V5.0	Affected: 0 , < * (custom)
Siemens	SIMATIC PCS neo V6.0	Affected: 0 , < V6.0 SP1 Update 1 (custom)
Siemens	SIMATIC S7-PLCSIM V17	Affected: 0 , < * (custom)
Siemens	SIMATIC STEP 7 V17	Affected: 0 , < V17 Update 9 (custom)
Siemens	SIMATIC STEP 7 V18	Affected: 0 , < * (custom)
Siemens	SIMATIC STEP 7 V19	Affected: 0 , < V19 Update 4 (custom)
Siemens	SIMATIC STEP 7 V20	Affected: 0 , < V20 Update 4 (custom)
Siemens	SIMATIC WinCC V17	Affected: 0 , < V17 Update 9 (custom)
Siemens	SIMATIC WinCC V18	Affected: 0 , < * (custom)
Siemens	SIMATIC WinCC V19	Affected: 0 , < V19 Update 4 (custom)
Siemens	SIMATIC WinCC V20	Affected: 0 , < V20 Update 4 (custom)
Siemens	SIMOCODE ES V17	Affected: 0 , < * (custom)
Siemens	SIMOCODE ES V18	Affected: 0 , < * (custom)
Siemens	SIMOCODE ES V19	Affected: 0 , < * (custom)
Siemens	SIMOCODE ES V20	Affected: 0 , < * (custom)
Siemens	SIMOTION SCOUT TIA V5.4	Affected: 0 , < * (custom)
Siemens	SIMOTION SCOUT TIA V5.5	Affected: 0 , < * (custom)
Siemens	SIMOTION SCOUT TIA V5.6	Affected: 0 , < V5.6 SP1 HF7 (custom)
Siemens	SIMOTION SCOUT TIA V5.7	Affected: 0 , < * (custom)
Siemens	SINAMICS Startdrive V17	Affected: 0 , < * (custom)
Siemens	SINAMICS Startdrive V18	Affected: 0 , < * (custom)
Siemens	SINAMICS Startdrive V19	Affected: 0 , < * (custom)
Siemens	SINAMICS Startdrive V20	Affected: 0 , < * (custom)
Siemens	SIRIUS Safety ES V17 (TIA Portal)	Affected: 0 , < * (custom)
Siemens	SIRIUS Safety ES V18 (TIA Portal)	Affected: 0 , < * (custom)
Siemens	SIRIUS Safety ES V19 (TIA Portal)	Affected: 0 , < * (custom)
Siemens	SIRIUS Safety ES V20 (TIA Portal)	Affected: 0 , < * (custom)
Siemens	SIRIUS Soft Starter ES V17 (TIA Portal)	Affected: 0 , < * (custom)
Siemens	SIRIUS Soft Starter ES V18 (TIA Portal)	Affected: 0 , < * (custom)
Siemens	SIRIUS Soft Starter ES V19 (TIA Portal)	Affected: 0 , < * (custom)
Siemens	SIRIUS Soft Starter ES V20 (TIA Portal)	Affected: 0 , < * (custom)
Siemens	TIA Portal Cloud V17	Affected: 0 , < * (custom)
Siemens	TIA Portal Cloud V18	Affected: 0 , < * (custom)
Siemens	TIA Portal Cloud V19	Affected: 0 , < V5.2.1.1 (custom)
Siemens	TIA Portal Cloud V20	Affected: 0 , < V5.2.2.2 (custom)
Siemens	TIA Portal Test Suite V20	Affected: 0 , < V20 Update 4 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-54678",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-08-12T20:10:51.202464Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-08-12T20:11:01.966Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC PCS neo V4.1",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC PCS neo V5.0",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC PCS neo V6.0",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.0 SP1 Update 1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-PLCSIM V17",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC STEP 7 V17",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V17 Update 9",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC STEP 7 V18",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC STEP 7 V19",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V19 Update 4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC STEP 7 V20",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V20 Update 4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC WinCC V17",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V17 Update 9",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC WinCC V18",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC WinCC V19",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V19 Update 4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC WinCC V20",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V20 Update 4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMOCODE ES V17",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMOCODE ES V18",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMOCODE ES V19",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMOCODE ES V20",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMOTION SCOUT TIA V5.4",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMOTION SCOUT TIA V5.5",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMOTION SCOUT TIA V5.6",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.6 SP1 HF7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMOTION SCOUT TIA V5.7",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SINAMICS Startdrive V17",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SINAMICS Startdrive V18",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SINAMICS Startdrive V19",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SINAMICS Startdrive V20",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIRIUS Safety ES V17 (TIA Portal)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIRIUS Safety ES V18 (TIA Portal)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIRIUS Safety ES V19 (TIA Portal)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIRIUS Safety ES V20 (TIA Portal)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIRIUS Soft Starter ES V17 (TIA Portal)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIRIUS Soft Starter ES V18 (TIA Portal)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIRIUS Soft Starter ES V19 (TIA Portal)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIRIUS Soft Starter ES V20 (TIA Portal)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "TIA Portal Cloud V17",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "TIA Portal Cloud V18",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "TIA Portal Cloud V19",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.2.1.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "TIA Portal Cloud V20",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.2.2.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "TIA Portal Test Suite V20",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V20 Update 4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions \u003c V6.0 SP1 Update 1), SIMATIC S7-PLCSIM V17 (All versions), SIMATIC STEP 7 V17 (All versions \u003c V17 Update 9), SIMATIC STEP 7 V18 (All versions), SIMATIC STEP 7 V19 (All versions \u003c V19 Update 4), SIMATIC STEP 7 V20 (All versions \u003c V20 Update 4), SIMATIC WinCC V17 (All versions \u003c V17 Update 9), SIMATIC WinCC V18 (All versions), SIMATIC WinCC V19 (All versions \u003c V19 Update 4), SIMATIC WinCC V20 (All versions \u003c V20 Update 4), SIMOCODE ES V17 (All versions), SIMOCODE ES V18 (All versions), SIMOCODE ES V19 (All versions), SIMOCODE ES V20 (All versions), SIMOTION SCOUT TIA V5.4 (All versions), SIMOTION SCOUT TIA V5.5 (All versions), SIMOTION SCOUT TIA V5.6 (All versions \u003c V5.6 SP1 HF7), SIMOTION SCOUT TIA V5.7 (All versions), SINAMICS Startdrive V17 (All versions), SINAMICS Startdrive V18 (All versions), SINAMICS Startdrive V19 (All versions), SINAMICS Startdrive V20 (All versions), SIRIUS Safety ES V17 (TIA Portal) (All versions), SIRIUS Safety ES V18 (TIA Portal) (All versions), SIRIUS Safety ES V19 (TIA Portal) (All versions), SIRIUS Safety ES V20 (TIA Portal) (All versions), SIRIUS Soft Starter ES V17 (TIA Portal) (All versions), SIRIUS Soft Starter ES V18 (TIA Portal) (All versions), SIRIUS Soft Starter ES V19 (TIA Portal) (All versions), SIRIUS Soft Starter ES V20 (TIA Portal) (All versions), TIA Portal Cloud V17 (All versions), TIA Portal Cloud V18 (All versions), TIA Portal Cloud V19 (All versions \u003c V5.2.1.1), TIA Portal Cloud V20 (All versions \u003c V5.2.2.2), TIA Portal Test Suite V20 (All versions \u003c V20 Update 4). Affected products do not properly sanitize Interprocess Communication input received through a Windows Named Pipe accessible to all local users. This could allow an authenticated local attacker to cause a type confusion and execute arbitrary code within the affected application."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        {
          "cvssV4_0": {
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
            "version": "4.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-502",
              "description": "CWE-502: Deserialization of Untrusted Data",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-09T08:46:43.446Z",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-693808.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2024-54678",
    "datePublished": "2025-08-12T11:16:53.387Z",
    "dateReserved": "2024-12-05T13:36:49.955Z",
    "dateUpdated": "2026-06-09T08:46:43.446Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2026-24199

CVE-2024-54678 (GCVE-0-2024-54678)

Tags

Sightings

Nomenclature