Siemens Sirius Soft Starter Es v20 Tia Portal vulnerabilities

2 CVEs affecting Siemens Sirius Soft Starter Es v20 Tia Portal, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-40759, published 2025-08-12.

More from Siemens.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-40759, published 2025-08-12. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC S7-PLCSIM V17 (All versions), SIMATIC STEP 7 V17 (All versions < V17 Update 9), SIMATIC STEP 7 V18 (All versions < V18 Update 6), SIMATIC STEP 7 V19…
• CVE-2024-54678, published 2025-08-12. High severity, CVSS 8.2. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), SIMATIC S7-PLCSIM V17 (All…