PT-2021-16746

CVE-2021-25675

·

Published

2021-03-15

·

Updated

2021-03-18

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions SIMATIC S7-PLCSIM V5.4 (All versions)
Description A Denial-of-Service condition can be caused in the application by an attacker with local access to the system when it is used to open a specially crafted file. This can lead to a divide by zero operation, causing the application to terminate unexpectedly. The service can be restored by restarting the application.
Recommendations For SIMATIC S7-PLCSIM V5.4, avoid opening specially crafted files to prevent the Denial-of-Service condition until a fix is available. As a temporary workaround, consider implementing access controls to limit local access to the system.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾