CISA + Hersteller
ICS-Advisories
Advisories speziell für industrielle Steuerungssysteme — von CISA ICS-CERT und direkt von Herstellern (darunter Siemens, ABB, Schneider Electric, WAGO und Phoenix Contact) — einschließlich Revisionshistorie (Erstveröffentlichung, Update A, Update B) und verknüpfter CVEs.
1
Gefunden
Advisory-Daten: Live-Anbindung— zuletzt abgerufen: 7. November 2026 um 14:22.
Filter
1 aktiv1 Advisories gefunden
SSA-580366
SSA-580366: DLL Sideloading Vulnerability in Siemens Software Center
Veröffentlicht
15. Oktober 2026
Letzte Aktualisierung
19. Oktober 2026
Verknüpfte CVEs
Betroffene Sektoren
Risk Evaluation
The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application. Siemens has released a new version for Siemens Software Center and recommends to update to the latest version. Please refer to our blog post for additional information about current known active exploitation and how to detect it.
Zusammenfassung der Gegenmaßnahmen
Update to V4.0.9.8 or later version (All existing versions of SSC will be auto updated on next startup. The latest version can also be downloaded in the respective link)
Revisionshistorie (3)
Erstveröffentlichung — 15. Oktober 2026
Publication Date
Update A — 17. Oktober 2026
Added remediation for Siemens Software Center
Update B — 19. Oktober 2026
Added reference to blog post about active exploitation of the vulnerability