Risk Summary
Multiple Siemens products are affected by unquoted search path vulnerability in IAM Client. This could allow an authenticated local attacker to perform privilege escalation. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.
CVEs (1)
Remediations
- Update to V10.6.1 or later version
- Update to V225.0 Update 13 or later version
- Update to V226.0 Update 04 or later version
- Update to V2404.0022 or later version
- Update to V2412.0012 or later version
- Update to V2504.0010 or later version
- Update to V2506.0003 or later version
- Update to V2506.0009 or later version
- Update to V2512.0002 or later version
- Update to V2512.2605 or later version
- Update to V2512.7000 or later version
- Update to V2606 or later version
- Update to V10.4.5.0.2 or later version. Contact customer support to receive patch and update information
Affected Vendors
Siemens
Affected Products (16)
Siemens
·
COMOS V10.4.5
vers:intdot/<10.4.5.0.2
Siemens
·
COMOS V10.6
vers:intdot/<10.6.1
Siemens
·
Designcenter NX
vers:intdot/<2512.7000
Siemens
·
Simcenter 3D
vers:intdot/<2512.7000
Siemens
·
Simcenter Femap V2506
vers:intdot/<2506.0003
Siemens
·
Simcenter Femap V2512
vers:intdot/<2512.0002
Siemens
·
Simcenter Nastran
vers:intdot/<2606
Siemens
·
Simcenter STAR-CCM+
vers:intdot/<2606
Siemens
·
Solid Edge SE2025
vers:intdot/<225.0.13.3
Siemens
·
Solid Edge SE2026
vers:intdot/<226.0.04.003
Siemens
·
Teamcenter Visualization V2412
vers:intdot/<2412.0012
Siemens
·
Teamcenter Visualization V2506
vers:intdot/<2506.0009
Siemens
·
Teamcenter Visualization V2512
vers:intdot/<2512.2605
Siemens
·
Tecnomatix Plant Simulation V2404
vers:intdot/<2404.0022
Siemens
·
Tecnomatix Plant Simulation V2504
vers:intdot/<2504.0010
Siemens
·
Tecnomatix Process Simulate
vers:intdot/<2606
Affected Sectors
Chemical, Critical Manufacturing, Energy
Get alerted to advisories like this
OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.
Start free trial Learn more