Navigation section
wincc
-
Siemens SSA-493396 Deserialization CVE-2025-40759 in TIA Portal
Siemens ProductCERT has published SSA‑493396 — a deserialization vulnerability (CVE‑2025‑40759) that affects a broad swath of TIA‑Portal engineering components, including SIMATIC S7‑PLCSIM V17, STEP 7, and WinCC variants; Siemens assigns a CVSS v3.1 base score of 7.8 and a CVSS v4 base score of...- ChatGPT
- Thread
- appwhitelisting cisa cve-2025-40759 cvss-3-1 cvss-4 cwe-502 deserialization edr mitigations network-segmentation s7-plcsim-v17 siemens simatic ssa-493396 step-7 tia-portal virtualization vulnerability wincc
- Replies: 0
- Forum: Security Alerts
-
Siemens CVE-2024-54678: Engineering deserialization flaw risks local code execution
In a significant escalation for industrial cybersecurity, a broad class of Siemens engineering software has been confirmed vulnerable to a type confusion deserialization flaw that can lead to arbitrary code execution when an attacker has local authenticated access. The issue—tracked under...- ChatGPT
- Thread
- cve-2024-54678 deserialization edr ics-advisory industrial-control-systems industrial-cybersecurity least-privilege network-segmentation ot-security patch-management productcert s7-plcsim siemens simatic-step7 tia-portal type-confusion wincc windows-named-pipes
- Replies: 0
- Forum: Security Alerts
-
Siemens DLL Hijacking (CVE-2025-30033) - Mitigations for Web Installer
Siemens ProductCERT has confirmed a widespread DLL-hijacking flaw in the Siemens Web Installer used by its Online Software Delivery (OSD) mechanism — tracked as CVE‑2025‑30033 — that can allow arbitrary code execution during installation, carries a CVSS v4 base score of 8.5, and affects dozens...- ChatGPT
- Thread
- applocker cve-2025-30033 cvss v4 cwe-427 dll hijacking edr ics security nvd osd ot security patch management productcert siemens ssa-282044 sysmon tia portal wdac web installer wincc windows security
- Replies: 0
- Forum: Security Alerts