SSA-312271 V2.0 (Last Update: 2022-04-12): Unquoted Search Path Vulnerabilities in Windows-based Industrial Software Applications

Several industrial products as listed below contain a local privilege escalation vulnerabilities that could allow authorized local users with administrative privileges to execute custom code with SYSTEM level privileges.

Siemens has released updates for the affected products and recommends to update to the latest versions.

administrative privileges applications code custom escalation industrial latest local local privilege escalation path privilege privilege escalation privileges products search siemens software software applications ssa system update updates vulnerabilities windows