IM
IronMonkey Threat Research
‹ Back to ICS Advisories

SSA-563922: Local Privilege Escalation Vulnerability in SIMOTION Tools

HIGH
CVSS 8.1
Date 2026-10-13T00:00:00+00:00
Source siemens-productcert
Published by Siemens ProductCERT

// Description

Several tools for the SIMOTION system are affected by a local privilege escalation vulnerability. This could allow an attacker to execute arbitrary code with SYSTEM privileges when a legitimate user installs an application that uses the affected setup component. This vulnerability poses a risk only during setup and installation phase of the affected tools. Siemens has released a new version for SIMATIC Technology Package TPCamGen and recommends to update to the latest version. Siemens recommends specific mitigations for products where fixes are not or not yet available.

// Vulnerabilities (1)

CVE ID CVSS Score Severity Description
CVE-2025-43715 8.1 high
CVE-2025-43715. Nullsoft Scriptable Install System (NSIS) before 3.11 on Windows allows local users to escalate privileges to SYSTEM during an installation, because the temporary plugins directory is created under %WINDIR%\temp and unprivileged users can place a crafted executable file by winning a race condition. This occurs because EW_CREATEDIR does not always set the CreateRestrictedDirectory error flag.

// Remediations (3)

Patch: Update to V1.3.1 or later version To obtain the patch and update information, please contact your re
Update to V1.3.1 or later version To obtain the patch and update information, please contact your regular Siemens contact person.
Mitigation: Ensure that no other users are logged in and that no unknown programs are running before starting th
Ensure that no other users are logged in and that no unknown programs are running before starting the installation of the affected products
Mitigation: Ensure that no other users are logged in and that no unknown programs are running before starting th
Ensure that no other users are logged in and that no unknown programs are running before starting the installation of the affected products

// References