CVE-2024-54678

HighCVSS 8.2/10Last modified Nov 10, 2026

Description

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), SIMATIC S7-PLCSIM V17 (All versions), SIMATIC STEP 7 V17 (All versions < V17 Update 9), SIMATIC STEP 7 V18 (All versions < V18 Update 6), SIMATIC STEP 7 V19 (All versions < V19 Update 4), SIMATIC STEP 7 V20 (All versions < V20 Update 4), SIMATIC WinCC V17 (All versions < V17 Update 9), SIMATIC WinCC V18 (All versions < V18 Update 6), SIMATIC WinCC V19 (All versions < V19 Update 4), SIMATIC WinCC V20 (All versions < V20 Update 4), SIMOCODE ES V17 (All versions), SIMOCODE ES V18 (All versions), SIMOCODE ES V19 (All versions), SIMOCODE ES V20 (All versions), SIMOTION SCOUT TIA V5.4 (All versions < V17 Update 9), SIMOTION SCOUT TIA V5.5 (All versions < V18 Update 6), SIMOTION SCOUT TIA V5.6 (All versions < V19 Update 4), SIMOTION SCOUT TIA V5.7 (All versions < V20 Update 4), SINAMICS Startdrive V17 (All versions), SINAMICS Startdrive V18 (All versions), SINAMICS Startdrive V19 (All versions), SINAMICS Startdrive V20 (All versions), SIRIUS Safety ES V17 (TIA Portal) (All versions), SIRIUS Safety ES V18 (TIA Portal) (All versions), SIRIUS Safety ES V19 (TIA Portal) (All versions), SIRIUS Safety ES V20 (TIA Portal) (All versions), SIRIUS Soft Starter ES V17 (TIA Portal) (All versions), SIRIUS Soft Starter ES V18 (TIA Portal) (All versions), SIRIUS Soft Starter ES V19 (TIA Portal) (All versions), SIRIUS Soft Starter ES V20 (TIA Portal) (All versions), TIA Portal Cloud V17 (All versions < V6.0.0.0), TIA Portal Cloud V18 (All versions < V6.3.0.2), TIA Portal Cloud V19 (All versions < V5.2.1.1), TIA Portal Cloud V20 (All versions < V5.2.2.2), TIA Portal Test Suite V20 (All versions < V20 Update 4). Affected products do not properly sanitize Interprocess Communication input received through a Windows Named Pipe accessible to all local users. This could allow an authenticated local attacker to cause a type confusion and execute arbitrary code within the affected application.

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-502

Affected software

VendorProductVersions
SiemensSIMATIC PCS neo V4.1< *
SiemensSIMATIC PCS neo V5.0< *
SiemensSIMATIC PCS neo V6.0< V6.0 SP1 Update 1
SiemensSIMATIC S7-PLCSIM V17< *
SiemensSIMATIC STEP 7 V17< V17 Update 9
SiemensSIMATIC STEP 7 V18< V18 Update 6
SiemensSIMATIC STEP 7 V19< V19 Update 4
SiemensSIMATIC STEP 7 V20< V20 Update 4
SiemensSIMATIC WinCC V17< V17 Update 9
SiemensSIMATIC WinCC V18< V18 Update 6
SiemensSIMATIC WinCC V19< V19 Update 4
SiemensSIMATIC WinCC V20< V20 Update 4
SiemensSIMOCODE ES V17< *
SiemensSIMOCODE ES V18< *
SiemensSIMOCODE ES V19< *
SiemensSIMOCODE ES V20< *
SiemensSIMOTION SCOUT TIA V5.4< V17 Update 9
SiemensSIMOTION SCOUT TIA V5.5< V18 Update 6
SiemensSIMOTION SCOUT TIA V5.6< V19 Update 4
SiemensSIMOTION SCOUT TIA V5.7< V20 Update 4
SiemensSINAMICS Startdrive V17< *
SiemensSINAMICS Startdrive V18< *
SiemensSINAMICS Startdrive V19< *
SiemensSINAMICS Startdrive V20< *
SiemensSIRIUS Safety ES V17 (TIA Portal)< *
SiemensSIRIUS Safety ES V18 (TIA Portal)< *
SiemensSIRIUS Safety ES V19 (TIA Portal)< *
SiemensSIRIUS Safety ES V20 (TIA Portal)< *
SiemensSIRIUS Soft Starter ES V17 (TIA Portal)< *
SiemensSIRIUS Soft Starter ES V18 (TIA Portal)< *
SiemensSIRIUS Soft Starter ES V19 (TIA Portal)< *
SiemensSIRIUS Soft Starter ES V20 (TIA Portal)< *
SiemensTIA Portal Cloud V17< V6.0.0.0
SiemensTIA Portal Cloud V18< V6.3.0.2
SiemensTIA Portal Cloud V19< V5.2.1.1
SiemensTIA Portal Cloud V20< V5.2.2.2
SiemensTIA Portal Test Suite V20< V20 Update 4

References

Timeline

Published
Aug 12, 2025
Last modified
Nov 10, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-546796.5CyberPanel (aka Cyber Panel) before 6778ad1 does not require the FilemanagerAdmin capability for restartMySQL actions.CVE-2024-54686.5The WordPress Header Builder Plugin – Pearl plugin for WordPress is vulnerable to unauthorized site option deletion due to a missing validatCVE-2024-546813.5Multiple bash files were present in the application's private directory. Bash files can be used on their own, by an attacker that has alreaCVE-2024-546824.9Mattermost versions 10.1.x <= 10.1.2, 10.0.x <= 10.0.2, 9.11.x <= 9.11.4, 9.5.x <= 9.5.12 fail to limit the file size for slack import file CVE-2024-546835.5In the Linux kernel, the following vulnerability has been resolved: netfilter: IDLETIMER: Fix for possible ABBA deadlock Deletion of the lCVE-2024-546876.1Vtiger CRM v.6.1 and before is vulnerable to Cross Site Scripting (XSS) via the Documents module and function uploadAndSaveFile in CRMEntityCVE-2024-54694.3DoS in KAS in GitLab CE/EE affecting all versions from 16.10.0 prior to 16.10.6 and 16.11.0 prior to 16.11.3 allows an attacker to crash KASCVE-2024-54702.7An issue was discovered in GitLab CE/EE affecting all versions starting from 17.0 prior to 17.0.4 and from 17.1 prior to 17.1.2 where a GuesCVE-2024-54719.8Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to agent takeover vulnerability due to the hard-coded sensitive keCVE-2024-54727.1The WP QuickLaTeX WordPress plugin before 3.8.7 does not sanitise and escape some of its settings, which could allow high privilege users suCVE-2024-547249.8PHPYun before 7.0.2 is vulnerable to code execution through backdoor-restricted arbitrary file writing and file inclusion.CVE-2024-547286.5Incorrect access control in BYD QIN PLUS DM-i Dilink OS 3.0_13.1.7.2204050.1 allows unauthorized attackers to access system logcat logs.
CVE-2024-54678: High severity, CVSS 8.2 | Vulnix