VDB

SSA-282044

SSA-282044 PUBLISHED CVSS 7.800000190734863 HIGH

The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.

Risk Scores

CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
SiemensSIMATIC Control Function Library (CFL) V4.x < V4.1
SiemensSIMATIC S7-PLCSIM V20 < V20.1
SiemensSIMATIC WinCC Visualization Architect (SiVArc) V19
SiemensModular PID CTRL Tool
SiemensSIMATIC S7-PLCSIM V17
SiemensSIMATIC WinCC V8.0
SiemensTotally Integrated Automation Portal (TIA Portal) V19
SiemensSIMATIC S7-Fail-safe Configuration Tool (S7-FCT) < V4.0.1
SiemensSIMATIC eaSie Workflow Skills
SiemensSIMATIC WinCC Unified PC Runtime V20
SiemensTeleControl Server Basic V3.1
SiemensSIMATIC S7-PLCSIM V19
SiemensSIMATIC WinCC Runtime Professional V20
SiemensSIMATIC eaSie PCS 7 Skill Package (6DL5424-0BX00-0AV8)
SiemensSIMATIC PCS 7 Advanced Process Library V9.1
SiemensTotally Integrated Automation Portal (TIA Portal) V18
SiemensSIMATIC MTP Integrator V2.x
SiemensSIMATIC MTP CREATOR V5.x < V5.0.0.1
SiemensTIA Administrator < V3.0.6
SiemensSIMATIC PCS 7 V9.1

…and 179 more

Timeline

  • Aug 12, 2025 CVE Published
  • Sep 8, 2026 CVE Updated

References

…and 22 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›