CVE-2021-25674

MEDIUM 5.5CVE-2021-25674 · Published 15/03/2021 · updated 17/06/2026

In short

CVE-2021-25674 is a MEDIUM (CVSS 5.5) vulnerability affecting simatic s7-plcsim (siemens).
Chance of exploitation in the next 30 days (EPSS): 0.23%, higher than 14.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
simatic s7-plcsim siemens	`= 5.4`	No fix yet

Description

A vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 (All versions). An attacker with local access to the system could cause a Denial-of-Service condition in the application when it is used to open a specially crafted file. As a consequence, a NULL pointer deference condition could cause the application to terminate unexpectedly and must be restarted to restore the service.

References

cert-portal.siemens.com/productcert/pdf/ssa-256092.pdf · Vendor Advisory

More vulnerabilities in simatic s7-plcsim

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free