CVE-2024-45386

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-02-11 · updated 2026-06-17
Weakness: CWE-613

Description

A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 2), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1), SIMOCODE ES V19 (All versions < V19 Update 1), SIRIUS Safety ES V19 (TIA Portal) (All versions < V19 Update 1), SIRIUS Soft Starter ES V19 (TIA Portal) (All versions < V19 Update 1), TIA Administrator (All versions < V3.0.4). Affected products do not correctly invalidate user sessions upon user logout. This could allow a remote unauthenticated attacker, who has obtained the session token by other means, to re-use a legitimate user's session even after logout.

Affected products

Siemens SIMATIC PCS neo V4.0: all versions
Siemens SIMATIC PCS neo V4.1: before V4.1 Update 2 — fixed in V4.1 Update 2
Siemens SIMATIC PCS neo V5.0: before V5.0 Update 1 — fixed in V5.0 Update 1
Siemens SIMOCODE ES V19: before V19 Update 1 — fixed in V19 Update 1
Siemens SIRIUS Safety ES V19 (TIA Portal): before V19 Update 1 — fixed in V19 Update 1
Siemens SIRIUS Soft Starter ES V19 (TIA Portal): before V19 Update 1 — fixed in V19 Update 1
Siemens TIA Administrator: before V3.0.4 — fixed in V3.0.4

How to fix

Upgrade to a fixed version: Siemens SIMATIC PCS neo V4.1 V4.1 Update 2; Siemens SIMATIC PCS neo V5.0 V5.0 Update 1; Siemens SIMOCODE ES V19 V19 Update 1; Siemens SIRIUS Safety ES V19 (TIA Portal) V19 Update 1; Siemens SIRIUS Soft Starter ES V19 (TIA Portal) V19 Update 1; Siemens TIA Administrator V3.0.4. Check the vendor advisory for mitigations.

References

https://cert-portal.siemens.com/productcert/html/ssa-342348.html

Get alerted when CVE-2024-45386 or the next vulnerability affects your stack