High severity · published Jul 14, 2026
CVE-2026-54429
A vulnerability has been identified in SIMATIC S7-PLCSIM Advanced (All versions)
7.4
CVSS
0.3%
EPSS
No
On KEV
Description
A vulnerability has been identified in SIMATIC S7-PLCSIM Advanced (All versions). Affected devices do not properly handle high-volume multicast network traffic, which can exhaust available memory resources in the affected application. This could allow an unauthenticated attacker on the local network segment to cause a denial-of-service condition of the affected application. The affected application becomes inaccessible and requires a manual restart; no project data is lost. Successful exploitation requires a specific project configuration to be already active on the targeted instance.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 18% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SS
SIMATIC S7-PLCSIM Advanced · Siemens
0 · source: vendor
In the news
VulnerabilityHigh
Siemens SIMATIC S7-PLCSIM Advanced
View CSAF
Summary
SIMATIC S7-PLCSIM Advanced contains a vulnerability that could allow an attacker to cause a denial of service condition. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
The following versions of Siemens SIMATIC S7-PLCSIM Advanced are affected:
SIMATIC S7-PLCSIM Advanced vers:all/* (CVE-2026-54429)
CVSS
Vendor
Equipment
Vulnerabilities
v3 7.4
Siemens
Siemens SIMATIC S7-PLCSIM Advanced
Allocation of Resources Without Limits or Throttling
Background
Critical Infrastructure Sectors: Critical Manufacturing
Countries/Areas Deployed: Worldwide
Company Headquarters Location: Germany
Vulnerabilities
Expand All +
CVE-2026-54429
Affected devices do not properly handle high-volume multicast network traffic, which can exhaust available memory resources in the affected application. This could allow an unauthenticated attacker on the local network segment to cause a denial-of-service condition of the affected application. The affected application becomes inaccessible and requires a manual restart; no project data is lost. Successful exploitation requires a specific project configuration to be already active on the targeted instance.
View CVE Details
Affected Products
Siemens SIMATIC S7-PLCSIM Advanced
Vendor: Siemens
Product Version: SIMATIC S7-PLCSIM Advanced
Product Status: ...
Jul 28, 2026·CISA Advisories
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-54429
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-54429
cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/html/ssa-828211.html
More from SIMATIC S7-PLCSIM Advanced
9.8
CVE-2020-15782
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl
7.8
CVE-2022-38465
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl
7.5
CVE-2019-10943
A vulnerability has been identified in SIMATIC Drive Controller family (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl
7.5
CVE-2019-6568
The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition
6.5
CVE-2022-30694
The login endpoint /FormLogin in affected web services does not apply proper origin checking
