Summary
The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.
Siemens has released a new version for Siemens Software Center and recommends to update to the latest version. Please refer to our blog post for additional information about current known active exploitation and how to detect it.
Vulnerabilities 1
-
Medium 6.7
A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application load…
KEV Oct 20, 2026
Revision history
-
#3
Added reference to blog post about active exploitation of the vulnerability
-
#2
Added remediation for Siemens Software Center
-
#1
Publication Date
References
-
SSA-580366: DLL Sideloading Vulnerability in Siemens Software Center - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-580366.html