Denial-of-Service Vulnerability in SIMATIC S7-PLCSIM by Siemens

CVE-2021-25675

Summary

A vulnerability exists in SIMATIC S7-PLCSIM V5.4 that allows an attacker with local system access to create a Denial-of-Service condition. This occurs when the application is manipulated to open a specially crafted file, which triggers a divide by zero operation. As a result, the application may terminate unexpectedly, requiring a restart to restore normal operations. This vulnerability poses a risk to system availability and should be mitigated accordingly.

References