CVE-2021-25674: Siemens SIMATIC s7-Plcsim

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 (All versions). An attacker with local access to the system could cause a Denial-of-Service condition in the application when it is used to open a specially crafted file. As a consequence, a NULL pointer deference condition could cause the application to terminate unexpectedly and must be restarted to restore the service.

Affected products

• Siemens SIMATIC s7-Plcsim: version 5.4 only

Published 2021-03-15. Last modified 2026-06-17.