SSA-369369: Weak Registry Permission Vulnerability in SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor
SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor contain a weak registry permission vulnerability that could allow an authenticated attacker to perform privilege escalation or bypass security measures. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-23403US | — | — | ||
A vulnerability has been identified in SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions). The affected device do not properly restrict the user permission… | ||||
references
External citations — patches, advisories, analysis.
remediations (4)
- MitigationSIMATIC IPC DiagBase
Remove the user privilege by modifying the registry manually or running a script. For more information refer the FAQ section at: https://support.industry.siemens.com/cs/document/109978178
- MitigationSIMATIC IPC DiagMonitor
Remove the user privilege by modifying the registry manually or running a script. For more information refer the FAQ section at: https://support.industry.siemens.com/cs/document/109978178
- No fix plannedSIMATIC IPC DiagBase
Currently no fix is planned
- No fix plannedSIMATIC IPC DiagMonitor
Currently no fix is planned
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan