Siemens SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor
SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor contain a weak registry permission vulnerability that could allow an authenticated attacker to perform privilege escalation or bypass security measures. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-23403US | — | — | ||
A vulnerability has been identified in SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions). The affected device do not properly restrict the user permission… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-369369: Weak Registry Permission Vulnerability in SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor - CSAF Versionself
- SSA-369369: Weak Registry Permission Vulnerability in SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor - HTML Versionself
- ICS Advisory ICSA-25-044-12 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-044-12 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (4)
- MitigationSIMATIC IPC DiagBase
Remove the user privilege by modifying the registry manually or running a script. For more information refer the FAQ section at: https://support.industry.siemens.com/cs/document/109978178
- MitigationSIMATIC IPC DiagMonitor
Remove the user privilege by modifying the registry manually or running a script. For more information refer the FAQ section at: https://support.industry.siemens.com/cs/document/109978178
- Kein Fix geplantSIMATIC IPC DiagBase
Currently no fix is planned
- Kein Fix geplantSIMATIC IPC DiagMonitor
Currently no fix is planned
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan