CISA + Hersteller
ICS-Advisories
Advisories speziell für industrielle Steuerungssysteme — von CISA ICS-CERT und direkt von Herstellern (darunter Siemens, ABB, Schneider Electric, WAGO und Phoenix Contact) — einschließlich Revisionshistorie (Erstveröffentlichung, Update A, Update B) und verknüpfter CVEs.
1
Gefunden
Advisory-Daten: Live-Anbindung— zuletzt abgerufen: 7. November 2026 um 15:53.
Filter
1 aktiv1 Advisories gefunden
SSA-563922
SSA-563922: Local Privilege Escalation Vulnerability in SIMOTION Tools
Siemens — SIMATIC Technology Package TPCamGen (6ES7823-0FE30-1AA0)
Veröffentlicht
9. September 2025
Letzte Aktualisierung
13. Oktober 2026
Verknüpfte CVEs
Betroffene Sektoren
Risk Evaluation
Several tools for the SIMOTION system are affected by a local privilege escalation vulnerability. This could allow an attacker to execute arbitrary code with SYSTEM privileges when a legitimate user installs an application that uses the affected setup component. This vulnerability poses a risk only during setup and installation phase of the affected tools. Siemens has released a new version for SIMATIC Technology Package TPCamGen and recommends to update to the latest version. Siemens recommends specific mitigations for products where fixes are not or not yet available.
Zusammenfassung der Gegenmaßnahmen
Ensure that no other users are logged in and that no unknown programs are running before starting the installation of the affected products
Revisionshistorie (2)
Erstveröffentlichung — 9. September 2025
Publication Date
Update A — 13. Oktober 2026
Added fix version for SIMATIC Technology Package TPCamGen