Description
A vulnerability has been identified in SIPORT (All versions < V3.4.0). The affected application improperly assigns file permissions to installation folders.
This could allow a local attacker with an unprivileged account to override or modify the service executables and subsequently gain elevated privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SIPORT | < V3.4.0 | V3.4.0 |
Advisories 3
- ICSA-24-319-02 Siemens SIPORT CISA ICS & IT advisories · May 6, 2025
- NCSC-2024-0433 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Nov 12, 2024
- SSA-064257 SSA-064257: Privilege Escalation Vulnerability in SIPORT Before V3.4.0 Siemens ProductCERT · Nov 12, 2024