Siemens SIMOTION Tools
Several tools for the SIMOTION system are affected by a local privilege escalation vulnerability. This could allow an attacker to execute arbitrary code with SYSTEM privileges when a legitimate user installs an application that uses the affected setup component. This vulnerability poses a risk only during setup and installation phase of the affected tools. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-43715US | — | — | ||
Nullsoft Scriptable Install System (NSIS) before 3.11 on Windows allows local users to escalate privileges to SYSTEM during an installation, because the temporary plugins directory… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-563922: Local Privilege Escalation Vulnerability in SIMOTION Tools - CSAF Versionself
- SSA-563922: Local Privilege Escalation Vulnerability in SIMOTION Tools - HTML Versionself
- ICS Advisory ICSA-25-254-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-254-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (10)
- MitigationSIMATIC Technology Package TPCamGen (6ES7823-0FE30-1AA0)
Ensure that no other users are logged in and that no unknown programs are running before starting the installation of the affected products
- MitigationSIMOTION OA MIIF (6AU1820-3DA20-0AB0)
Ensure that no other users are logged in and that no unknown programs are running before starting the installation of the affected products
- MitigationSIMOTION OACAMGEN (6AU1820-3EA20-0AB0)
Ensure that no other users are logged in and that no unknown programs are running before starting the installation of the affected products
- MitigationSIMOTION OALECO (6AU1820-3HA20-0AB0)
Ensure that no other users are logged in and that no unknown programs are running before starting the installation of the affected products
- MitigationSIMOTION OAVIBX (6AU1820-3CA20-0AB0)
Ensure that no other users are logged in and that no unknown programs are running before starting the installation of the affected products
- Kein Fix geplantSIMOTION OA MIIF (6AU1820-3DA20-0AB0)
Currently no fix is planned
- Kein Fix geplantSIMOTION OACAMGEN (6AU1820-3EA20-0AB0)
Currently no fix is planned
- Kein Fix geplantSIMOTION OALECO (6AU1820-3HA20-0AB0)
Currently no fix is planned
- Kein Fix geplantSIMOTION OAVIBX (6AU1820-3CA20-0AB0)
Currently no fix is planned
- Kein Fix verfügbarSIMATIC Technology Package TPCamGen (6ES7823-0FE30-1AA0)
Currently no fix is available
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan