High SSA-369369 1 CVE

SSA-369369: Weak Registry Permission Vulnerability in SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor

Published Feb 11, 2025 · Updated Apr 8, 2025 · Revision 2

Vendor: Siemens Product: SIMATIC IPC DiagBase Product: SIMATIC IPC DiagMonitor

Summary

SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor contain a weak registry permission vulnerability that could allow an authenticated attacker to perform privilege escalation or bypass security measures.

Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 1

High 7.0

CVE-2025-23403

A vulnerability has been identified in SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions). The…

Siemens SIMATIC IPC DiagMonitor SIMATIC IPC DiagBase ICS / OT

Feb 11, 2025

Revision history

2025-04-08 #2
Added Sixtus Leonhardsberger to Acknowledgment
2025-02-11 #1
Publication Date

References

SSA-369369: Weak Registry Permission Vulnerability in SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-369369.html