Vulnerability · Published Mar 15, 2021 · Assigned by siemens
CVE-2021-25674
Medium 5.5
In plain English
A medium-severity null pointer dereference in SIMATIC S7-PLCSIM V5.4 from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities).
Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.2%top 86.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 (All versions). An attacker with local access to the system could cause a Denial-of-Service condition in the application when it is used to open a specially crafted file. As a consequence, a NULL pointer deference condition could cause the application to terminate unexpectedly and must be restarted to restore the service.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Siemens | SIMATIC S7-PLCSIM V5.4 | All versions |
Weakness: CWE-476
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-256092.pdf x_refsource_MISC