Siemens SIMATIC IPC DiagBase and DiagMonitor Weak Registry Permission Vulnerability Allowing Privilege Escalation

A vulnerability exists in all versions of Siemens SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor due to improper restriction of user permissions for a registry key. This flaw could enable an authenticated attacker to load vulnerable drivers into the system, potentially leading to privilege escalation or bypassing endpoint protection and other security measures.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation or the ability to bypass security measures such as endpoint protection.

Remediation

Users can manually modify the registry to remove the user privilege or run a script for the same purpose. For more information, refer to the Siemens support document 109978178. Currently, no fix is planned for this vulnerability.