Advisories · Technology

Siemens SIMATIC WinCC V18.

Every CVE that names Siemens SIMATIC WinCC V18 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-40759 CVE record

CVSS 8.5 High

Deserialization of untrusted data in Siemens SIMATIC S7-PLCSIM V17 and others
- Siemens SIMATIC S7-PLCSIM V17
- Siemens SIMATIC STEP 7 V17
- Insecure deserialization
Not analysed yet 12 Aug 2025
CVE-2024-54678 CVE record

CVSS 8.6 High

Deserialization of untrusted data in Siemens SIMATIC PCS neo V4.1 and others
- Siemens SIMATIC PCS neo V4.1
- Siemens SIMATIC PCS neo V5.0
- Insecure deserialization
Not analysed yet 12 Aug 2025
CVE-2024-52051 CVE record

CVSS 7.0 High

Improper input validation in Siemens SIMATIC S7-PLCSIM V17 and others
- Siemens SIMATIC S7-PLCSIM V17
- Siemens SIMATIC S7-PLCSIM V18
- CWE-20
Not analysed yet 10 Dec 2024
CVE-2024-49849 CVE record

CVSS 8.4 High

Deserialization of untrusted data in Siemens SIMATIC S7-PLCSIM V16 and others
- Siemens SIMATIC S7-PLCSIM V16
- Siemens SIMATIC S7-PLCSIM V17
- Insecure deserialization
Not analysed yet 10 Dec 2024
CVE-2023-32736 CVE record

CVSS 7.0 High

Deserialization of untrusted data in Siemens SIMATIC S7-PLCSIM V16 and others
- Siemens SIMATIC S7-PLCSIM V16
- Siemens SIMATIC S7-PLCSIM V17
- Insecure deserialization
Not analysed yet 12 Nov 2024
CVE-2023-32735 CVE record

CVSS 7.0 High

Deserialization of untrusted data in Siemens SIMATIC STEP 7 Safety V16 and others
- Siemens SIMATIC STEP 7 Safety V16
- Siemens SIMATIC STEP 7 Safety V17
- Insecure deserialization
Not analysed yet 9 Jul 2024