Skip to content
OpenAdvisories
Medium SSA-288252 1 CVE

SSA-288252: Unquoted Search Path Vulnerability in IAM Client

Published Jul 14, 2026 · Updated Jul 14, 2026

Vendor: Siemens Product: COMOS V10.4.5 Product: COMOS V10.6 Product: Designcenter NX Product: Simcenter 3D Product: Simcenter Femap V2506 Product: Simcenter Femap V2512 Product: Simcenter Nastran Product: Simcenter STAR-CCM+ Product: Solid Edge SE2025 Product: Solid Edge SE2026 Product: Teamcenter Visualization V2412 Product: Teamcenter Visualization V2506 Product: Teamcenter Visualization V2512 Product: Tecnomatix Plant Simulation V2404 Product: Tecnomatix Plant Simulation V2504 Product: Tecnomatix Process Simulate

Summary

Multiple Siemens products are affected by unquoted search path vulnerability in IAM Client. This could allow an authenticated local attacker to perform privilege escalation.

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 1

Revision history

  1. #1

    Publication Date

References