ICSA-25-254-01

icsaUScisa_csaf_ot

Siemens SIMOTION Tools

view advisory published 2025-09-09

Several tools for the SIMOTION system are affected by a local privilege escalation vulnerability. This could allow an attacker to execute arbitrary code with SYSTEM privileges when a legitimate user installs an application that uses the affected setup component. This vulnerability poses a risk only during setup and installation phase of the affected tools. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2025-43715US——
Nullsoft Scriptable Install System (NSIS) before 3.11 on Windows allows local users to escalate privileges to SYSTEM during an installation, because the temporary plugins directory…
02

references

External citations — patches, advisories, analysis.

03

remediations (10)

  • MitigationSIMATIC Technology Package TPCamGen (6ES7823-0FE30-1AA0)

    Ensure that no other users are logged in and that no unknown programs are running before starting the installation of the affected products

  • MitigationSIMOTION OA MIIF (6AU1820-3DA20-0AB0)

    Ensure that no other users are logged in and that no unknown programs are running before starting the installation of the affected products

  • MitigationSIMOTION OACAMGEN (6AU1820-3EA20-0AB0)

    Ensure that no other users are logged in and that no unknown programs are running before starting the installation of the affected products

  • MitigationSIMOTION OALECO (6AU1820-3HA20-0AB0)

    Ensure that no other users are logged in and that no unknown programs are running before starting the installation of the affected products

  • MitigationSIMOTION OAVIBX (6AU1820-3CA20-0AB0)

    Ensure that no other users are logged in and that no unknown programs are running before starting the installation of the affected products

  • No fix plannedSIMOTION OA MIIF (6AU1820-3DA20-0AB0)

    Currently no fix is planned

  • No fix plannedSIMOTION OACAMGEN (6AU1820-3EA20-0AB0)

    Currently no fix is planned

  • No fix plannedSIMOTION OALECO (6AU1820-3HA20-0AB0)

    Currently no fix is planned

  • No fix plannedSIMOTION OAVIBX (6AU1820-3CA20-0AB0)

    Currently no fix is planned

  • No fix availableSIMATIC Technology Package TPCamGen (6ES7823-0FE30-1AA0)

    Currently no fix is available

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan