SS
Product
SIMATIC S7-PLCSIM Advanced
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
VulnerabilityHigh
Siemens SIMATIC S7-PLCSIM Advanced
View CSAF
Summary
SIMATIC S7-PLCSIM Advanced contains a vulnerability that could allow an attacker to cause a denial of service condition. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
The following versions of Siemens SIMATIC S7-PLCSIM Advanced are affected:
SIMATIC S7-PLCSIM Advanced vers:all/* (CVE-2026-54429)
CVSS
Vendor
Equipment
Vulnerabilities
v3 7.4
Siemens
Siemens SIMATIC S7-PLCSIM Advanced
Allocation of Resources Without Limits or Throttling
Background
Critical Infrastructure Sectors: Critical Manufacturing
Countries/Areas Deployed: Worldwide
Company Headquarters Location: Germany
Vulnerabilities
Expand All +
CVE-2026-54429
Affected devices do not properly handle high-volume multicast network traffic, which can exhaust available memory resources in the affected application. This could allow an unauthenticated attacker on the local network segment to cause a denial-of-service condition of the affected application. The affected application becomes inaccessible and requires a manual restart; no project data is lost. Successful exploitation requires a specific project configuration to be already active on the targeted instance.
View CVE Details
Affected Products
Siemens SIMATIC S7-PLCSIM Advanced
Vendor: Siemens
Product Version: SIMATIC S7-PLCSIM Advanced
Product Status: ...
Jul 28, 2026·CISA Advisories
