CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 15:53.

Filters

1 active

Reset filters

Search: SSA-563922

Vendor

Protocol

Sector

Severity

Source

1 advisories found

SSA-563922

SSA-563922: Local Privilege Escalation Vulnerability in SIMOTION Tools

Siemens — SIMATIC Technology Package TPCamGen (6ES7823-0FE30-1AA0)

Siemens ProductCERThigh

Published

9 September 2025

Last update

13 October 2026

Linked CVEs

CVE-2025-43715

Affected sectors

Risk evaluation

Several tools for the SIMOTION system are affected by a local privilege escalation vulnerability. This could allow an attacker to execute arbitrary code with SYSTEM privileges when a legitimate user installs an application that uses the affected setup component. This vulnerability poses a risk only during setup and installation phase of the affected tools. Siemens has released a new version for SIMATIC Technology Package TPCamGen and recommends to update to the latest version. Siemens recommends specific mitigations for products where fixes are not or not yet available.

Mitigation summary

Ensure that no other users are logged in and that no unknown programs are running before starting the installation of the affected products

Revision history (2)

Initial publication — 9 September 2025
Publication Date
Update A — 13 October 2026
Added fix version for SIMATIC Technology Package TPCamGen

Official source: Siemens ProductCERT