<p>Affected applications do not properly restrict the .NET BinaryFormatter when deserializing user-controllable input. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application.</p>
<p>Siemens has released a new version for SIMATIC STEP 7 Safety V18 and recommends to update to the latest version.</p>
Source link
