Description
A vulnerability has been identified in Xpedition Designer VX.2.10 (All versions < VX.2.10 Update 13), Xpedition Designer VX.2.11 (All versions < VX.2.11 Update 11), Xpedition Designer VX.2.12 (All versions < VX.2.12 Update 5), Xpedition Designer VX.2.13 (All versions < VX.2.13 Update 1). The affected application assigns improper access rights to the service executable. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Xpedition Designer VX.2.10 | All versions < VX.2.10 Update 13 | — |
| Siemens | Xpedition Designer VX.2.11 | All versions < VX.2.11 Update 11 | — |
| Siemens | Xpedition Designer VX.2.12 | All versions < VX.2.12 Update 5 | — |
| Siemens | Xpedition Designer VX.2.13 | All versions < VX.2.13 Update 1 | — |
Advisories 2
- ICSA-22-167-11 Siemens Xpedition Designer CISA ICS & IT advisories · May 6, 2025
- SSA-988345 SSA-988345: Local Privilege Escalation Vulnerability in Xpedition Designer Siemens ProductCERT · Jun 13, 2023