Home / Items
Vendor advisorySeverity 8.1 high
SSA-563922: Local Privilege Escalation Vulnerability in SIMOTION Tools
SSA-563922 · Siemens · September 9, 2025
Summary
Several tools for the SIMOTION system are affected by a local privilege escalation vulnerability. This could allow an attacker to execute arbitrary code with SYSTEM privileges when a legitimate user installs an application that uses the affected setup component. This vulnerability poses a risk only during setup and installation phase of the affected tools.
Siemens has released a new version for SIMATIC Technology Package TPCamGen and recommends to update to the latest version. Siemens recommends specific mitigations for products where fixes are not or not yet available.
From Siemens (vendor's own words, quoted), quoted as published. Check the source before acting.
What to do
Ensure that no other users are logged in and that no unknown programs are running before starting the installation of the affected products
Currently no fix is planned
Update to V1.3.1 or later version
To obtain the patch and update information, please contact your regular Siemens contact person.
Vendor fix or mitigation, quoted from the advisory.
Each CVE in this advisory
| CVE | Severity | Known exploited | Exploit likelihood |
|---|---|---|---|
| CVE-2025-43715 | 8.1 high | No | 0.3% |
Severity from the advisory (CVSS), known exploitation from CISA's catalog, exploit likelihood from EPSS (next 30 days).
Affected products
| Vendor | Product |
|---|---|
| Siemens | SIMATIC Technology Package TPCamGen (6ES7823-0FE30-1AA0) |
| Siemens | SIMOTION OA MIIF (6AU1820-3DA20-0AB0) |
| Siemens | SIMOTION OACAMGEN (6AU1820-3EA20-0AB0) |
| Siemens | SIMOTION OALECO (6AU1820-3HA20-0AB0) |
| Siemens | SIMOTION OAVIBX (6AU1820-3CA20-0AB0) |
Why it's on these mode pages
- Maritime: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
- Pipeline: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
- Freight rail: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
- Passenger rail and transit: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
- Highway and motor carrier: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
- Postal and parcel: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
Change history
- September 9, 2025: Publication Date
- October 13, 2026: Added fix version for SIMATIC Technology Package TPCamGen
- November 9, 2026: First collected by Watch
Securidigm Scout can match advisories like this one to the equipment on your own network, offline. securidigm.com