SSA-188491: DLL Hijacking Vulnerabilities in Siemens Software Center
Multiple DLL Hijacking vulnerabilities in Siemens Software Center (SSC) could allow a local attacker to execute code with elevated privileges. Siemens has released an update for the Siemens Software Center and recommends to update to the latest version.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-41544US | high7.8 | — | ||
A vulnerability has been identified in Siemens Software Center (All versions < V3.0). A DLL Hijacking vulnerability could allow a local attacker to execute code with elevated privi… | ||||
| CVE-2022-25634US | high7.5 | — | ||
Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory. | ||||
references
External citations — patches, advisories, analysis.
- SSA-188491: DLL Hijacking Vulnerabilities in Siemens Software Center - CSAF Versionself
- SSA-188491: DLL Hijacking Vulnerabilities in Siemens Software Center - HTML Versionself
- SSA-188491: DLL Hijacking Vulnerabilities in Siemens Software Center - PDF Versionself
- SSA-188491: DLL Hijacking Vulnerabilities in Siemens Software Center - TXT Versionself
remediations (4)
- MitigationSiemens Software Center
Harden the application host to prevent local access by untrusted personnel
- MitigationSiemens Software Center
Harden the application host to prevent local access by untrusted personnel
- FixedSiemens Software Center
Update to V3.0 or later version (Existing installations of SSC will be prompted to update whenever a new version is available. The latest version can also be downloaded in the respective link)
https://www.sw.siemens.com/en-US/siemens-software-center/ - FixedSiemens Software Center
Update to V3.0 or later version (Existing installations of SSC will be prompted to update whenever a new version is available. The latest version can also be downloaded in the respective link)
https://www.sw.siemens.com/en-US/siemens-software-center/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan