Summary
Several tools for the SIMOTION system are affected by a local privilege escalation vulnerability. This could allow an attacker to execute arbitrary code with SYSTEM privileges when a legitimate user installs an application that uses the affected setup component. This vulnerability poses a risk only during setup and installation phase of the affected tools.
Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
Vulnerabilities 1
-
High 8.1
Nullsoft Scriptable Install System (NSIS) before 3.11 on Windows allows local users to escalate privileges to SYSTEM du…
Revision history
-
#1
Publication Date
References
-
SSA-563922: Local Privilege Escalation Vulnerability in SIMOTION Tools - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-563922.html
-
ICS Advisory ICSA-25-254-01 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-25-254-01
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B