CVE-2024-52051 — A vulnerability has been identified in SIMATIC S7-PLCSIM V17 (All versions), SIMATIC S7-PLCSIM V18 (All versions), SIMATIC STEP 7 Safety V17 (All versions < V17 Update 9), SIMATIC STEP 7 Safety V18 (All versions), SIMATIC STEP 7 Safety V19 (All versions < V19 Update 4), SIMATIC STEP 7 V17 (All versions < V17 Update 9), SIMATIC STEP 7 V18 (All versions), SIMATIC STEP 7 V19 (All versions < V19 Update 4), SIMATIC WinCC Unified PC Runtime V18 (All versions), SIMATIC WinCC Unified PC Runtime V19 (All versions < V19 Update 4), SIMATIC WinCC Unified V17 (All versions < V17 Update 9), SIMATIC WinCC Unified V18 (All versions), SIMATIC WinCC Unified V19 (All versions < V19 Update 4), SIMATIC WinCC V17 (All versions < V17 Update 9), SIMATIC WinCC V18 (All versions), SIMATIC WinCC V19 (All versions < V19 Update 4), SIMOCODE ES V17 (All versions), SIMOCODE ES V18 (All versions), SIMOCODE ES V19 (All versions), SIMOTION SCOUT TIA V5.4 (All versions), SIMOTION SCOUT TIA V5.5 (All versions), SIMOTION SCOUT TIA V5.6 (All versions < V5.6 SP1 HF7), SINAMICS Startdrive V17 (All versions), SINAMICS Startdrive V18 (All versions), SINAMICS Startdrive V19 (All versions), SIRIUS Safety ES V17 (TIA Portal) (All versions), SIRIUS Safety ES V18 (TIA Portal) (All versions), SIRIUS Safety ES V19 (TIA Portal) (All versions), SIRIUS Soft Starter ES V17 (TIA Portal) (All versions), SIRIUS Soft Starter ES V18 (TIA Portal) (All versions), SIRIUS Soft Starter ES V19 (TIA Portal) (All versions), TIA Portal Cloud V17 (All versions), TIA Portal Cloud V18 (All versions), TIA Portal Cloud V19 (All versions < V5.2.1.1)

Back Back to CVE browser

HIGH

A vulnerability has been identified in SIMATIC S7-PLCSIM V17 (All versions), SIMATIC S7-PLCSIM V18 (All versions), SIMATIC STEP 7 Safety V17 (All versions < V17 Update 9), SIMATIC STEP 7 Safety V18 (All versions), SIMATIC STEP 7 Safety V19 (All versions < V19 Update 4), SIMATIC STEP 7 V17 (All versions < V17 Update 9), SIMATIC STEP 7 V18 (All versions), SIMATIC STEP 7 V19 (All versions < V19 Update 4), SIMATIC WinCC Unified PC Runtime V18 (All versions), SIMATIC WinCC Unified PC Runtime V19 (All versions < V19 Update 4), SIMATIC WinCC Unified V17 (All versions < V17 Update 9), SIMATIC WinCC Unified V18 (All versions), SIMATIC WinCC Unified V19 (All versions < V19 Update 4), SIMATIC WinCC V17 (All versions < V17 Update 9), SIMATIC WinCC V18 (All versions), SIMATIC WinCC V19 (All versions < V19 Update 4), SIMOCODE ES V17 (All versions), SIMOCODE ES V18 (All versions), SIMOCODE ES V19 (All versions), SIMOTION SCOUT TIA V5.4 (All versions), SIMOTION SCOUT TIA V5.5 (All versions), SIMOTION SCOUT TIA V5.6 (All versions < V5.6 SP1 HF7), SINAMICS Startdrive V17 (All versions), SINAMICS Startdrive V18 (All versions), SINAMICS Startdrive V19 (All versions), SIRIUS Safety ES V17 (TIA Portal) (All versions), SIRIUS Safety ES V18 (TIA Portal) (All versions), SIRIUS Safety ES V19 (TIA Portal) (All versions), SIRIUS Soft Starter ES V17 (TIA Portal) (All versions), SIRIUS Soft Starter ES V18 (TIA Portal) (All versions), SIRIUS Soft Starter ES V19 (TIA Portal) (All versions), TIA Portal Cloud V17 (All versions), TIA Portal Cloud V18 (All versions), TIA Portal Cloud V19 (All versions < V5.2.1.1)

Published Dec 10, 2024

7.0

HIGH

CVSS 4.0

EPSS 0.18%

Description

A vulnerability has been identified in SIMATIC S7-PLCSIM V17 (All versions), SIMATIC S7-PLCSIM V18 (All versions), SIMATIC STEP 7 Safety V17 (All versions < V17 Update 9), SIMATIC STEP 7 Safety V18 (All versions), SIMATIC STEP 7 Safety V19 (All versions < V19 Update 4), SIMATIC STEP 7 V17 (All versions < V17 Update 9), SIMATIC STEP 7 V18 (All versions), SIMATIC STEP 7 V19 (All versions < V19 Update 4), SIMATIC WinCC Unified PC Runtime V18 (All versions), SIMATIC WinCC Unified PC Runtime V19 (All versions < V19 Update 4), SIMATIC WinCC Unified V17 (All versions < V17 Update 9), SIMATIC WinCC Unified V18 (All versions), SIMATIC WinCC Unified V19 (All versions < V19 Update 4), SIMATIC WinCC V17 (All versions < V17 Update 9), SIMATIC WinCC V18 (All versions), SIMATIC WinCC V19 (All versions < V19 Update 4), SIMOCODE ES V17 (All versions), SIMOCODE ES V18 (All versions), SIMOCODE ES V19 (All versions), SIMOTION SCOUT TIA V5.4 (All versions), SIMOTION SCOUT TIA V5.5 (All versions), SIMOTION SCOUT TIA V5.6 (All versions < V5.6 SP1 HF7), SINAMICS Startdrive V17 (All versions), SINAMICS Startdrive V18 (All versions), SINAMICS Startdrive V19 (All versions), SIRIUS Safety ES V17 (TIA Portal) (All versions), SIRIUS Safety ES V18 (TIA Portal) (All versions), SIRIUS Safety ES V19 (TIA Portal) (All versions), SIRIUS Soft Starter ES V17 (TIA Portal) (All versions), SIRIUS Soft Starter ES V18 (TIA Portal) (All versions), SIRIUS Soft Starter ES V19 (TIA Portal) (All versions), TIA Portal Cloud V17 (All versions), TIA Portal Cloud V18 (All versions), TIA Portal Cloud V19 (All versions < V5.2.1.1). The affected devices do not properly sanitize user-controllable input when parsing user settings. This could allow an attacker to locally execute arbitrary commands in the host operating system with the privileges of the user.

Affected products

Vendor Siemens Product Simatic S7-Plcsim V17 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product Simatic S7-Plcsim V18 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product SIMATIC STEP 7 Safety V17 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V17 Update 9
Vendor Siemens Product SIMATIC STEP 7 Safety V18 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product SIMATIC STEP 7 Safety V19 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V19 Update 4
Vendor Siemens Product Simatic Step 7 V17 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V17 Update 9
Vendor Siemens Product Simatic Step 7 V18 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product Simatic Step 7 V19 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V19 Update 4
Vendor Siemens Product SIMATIC WinCC Unified PC Runtime V18 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product SIMATIC WinCC Unified PC Runtime V19 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V19 Update 4
Vendor Siemens Product SIMATIC WinCC Unified V17 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V17 Update 9
Vendor Siemens Product SIMATIC WinCC Unified V18 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product SIMATIC WinCC Unified V19 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V19 Update 4
Vendor Siemens Product SIMATIC WinCC V17 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V17 Update 9
Vendor Siemens Product SIMATIC WinCC V18 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product SIMATIC WinCC V19 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V19 Update 4
Vendor Siemens Product Simocode ES V17 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product Simocode ES V18 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product Simocode ES V19 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product Simotion Scout Tia V5.4 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product Simotion Scout Tia V5.5 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product Simotion Scout Tia V5.6 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V5.6 SP1 HF7
Vendor Siemens Product SINAMICS Startdrive V17 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product SINAMICS Startdrive V18 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product SINAMICS Startdrive V19 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product SIRIUS Safety ES V17 (TIA Portal) Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product SIRIUS Safety ES V18 (TIA Portal) Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product SIRIUS Safety ES V19 (TIA Portal) Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product SIRIUS Soft Starter ES V17 (TIA Portal) Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product SIRIUS Soft Starter ES V18 (TIA Portal) Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product SIRIUS Soft Starter ES V19 (TIA Portal) Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product TIA Portal Cloud V17 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product TIA Portal Cloud V18 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product TIA Portal Cloud V19 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V5.2.1.1

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Date	Score	Percentile	Model
Oct 1, 2026	0.18% (0.00179)	6.68th	v5 (v2026.06.15)
Jun 15, 2026	0.18% (0.00176)	7.27th	v5 (v2026.06.15)
Mar 17, 2025	0.02% (0.00021)	3.21th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00043)	10.81th	v3 (v2023.03.01)
Dec 11, 2024	0.04% (0.00043)	10.79th	v3 (v2023.03.01)

Description

Affected products

Remediation

Metrics

Score over time

Percentile over time

References (1)

Change history (0)