Denial-of-Service Vulnerability in SIMATIC S7-PLCSIM Advanced by Siemens

CVE-2026-54429

What is CVE-2026-54429?

A vulnerability has been discovered in the SIMATIC S7-PLCSIM Advanced application that fails to adequately manage high-volume multicast network traffic. This oversight can lead to memory resource exhaustion within the application, resulting in a denial-of-service condition. An attacker on the local network segment can exploit this vulnerability, causing the application to become inaccessible and necessitating a manual restart, although no project data is lost in the process. To successfully exploit this vulnerability, the attacker must have a specific project configuration active on the targeted instance.

References