https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T11:59:02.082241+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/bdu:2024-05703 bdu:2024-05703 2026-09-28T11:59:02.554427+00:00 bdu:2024-05703 https://vulnerability.circl.lu/vuln/cve-2022-45147 CVE-2022-45147 2026-09-28T11:59:02.554492+00:00

Affected: Siemens SIMATIC PCS neo V4.0, Siemens SIMATIC STEP 7 V16, Siemens SIMATIC STEP 7 V17, Siemens SIMATIC STEP 7 V18, siemens simatic_pcs_neo, siemens simatic_step_7

A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC STEP 7 V16 (All versions), SIMATIC STEP 7 V17 (All versions), SIMATIC STEP 7 V18 (All versions < V18 Update 2). Affected applications do not properly restrict the .NET BinaryFormatter when deserializing user-controllable input. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application. This is the same issue that exists for .NET BinaryFormatter https://docs.microsoft.com/en-us/visualstudio/code-quality/ca2300.