CISA + leveranciers
ICS Advisories
Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.
1
Gevonden
Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 15:23.
Filters
1 actief1 advisories gevonden
SSA-563922
SSA-563922: Local Privilege Escalation Vulnerability in SIMOTION Tools
Siemens — SIMATIC Technology Package TPCamGen (6ES7823-0FE30-1AA0)
Gepubliceerd
9 september 2025
Laatste update
13 oktober 2026
Gekoppelde CVE's
Getroffen sectoren
Risk evaluation
Several tools for the SIMOTION system are affected by a local privilege escalation vulnerability. This could allow an attacker to execute arbitrary code with SYSTEM privileges when a legitimate user installs an application that uses the affected setup component. This vulnerability poses a risk only during setup and installation phase of the affected tools. Siemens has released a new version for SIMATIC Technology Package TPCamGen and recommends to update to the latest version. Siemens recommends specific mitigations for products where fixes are not or not yet available.
Mitigatiesamenvatting
Ensure that no other users are logged in and that no unknown programs are running before starting the installation of the affected products
Revisiegeschiedenis (2)
Initiële publicatie — 9 september 2025
Publication Date
Update A — 13 oktober 2026
Added fix version for SIMATIC Technology Package TPCamGen