Two null point dereference vulnerabilities affect multiple SIMATIC software products. These could allow an attacker to cause a persistent denial of service condition in the RPC Server of these products.
Siemens has released new versions for the affected products and recommends to update to the latest versions.
https://cert-portal.siemens.com/productcert/html/ssa-753746.html