Siemens · Software Center
Updated October 22, 2026
An uncontrolled search path element allows an authenticated local attacker to place a malicious DLL in a directory that the application loads, resulting in code execution with application privileges.
Exploitation can lead to privilege escalation, lateral movement within enterprise environments, and deployment of ransomware or espionage tools.
Install Siemens’ security patch immediately; if unavailable, restrict write permissions on search‑path directories and enforce application‑whitelisting.
More active vulnerabilities