A vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 (All versions). An attacker with local access to the system could cause a Denial-of-Service condition in the application when it is used to open a specially crafted file. As a consequence, the application could enter an infinite loop, become unresponsive and must be restarted to restore the service.

References

• https://nvd.nist.gov/vuln/detail/CVE-2021-25673
• https://cert-portal.siemens.com/productcert/pdf/ssa-256092.pdf