Privilege Escalation via Untrusted Search Path in Siemens IAM Client SDK

Successful exploitation may allow an authenticated local attacker to escalate privileges on the affected system. Because the vulnerability involves an untrusted search path in a shared SDK component, exploitation could result in execution of attacker-controlled code with elevated privileges, leading to compromise of confidentiality, integrity, and availability on the local host. The available scoring indicates high impact to all three CIA dimensions once exploitation succeeds, but the attack requires local access and is not remotely exploitable.

If immediate patching is not possible, reduce exposure by restricting local access to affected systems to trusted administrators and users only, minimizing opportunities for authenticated local attackers to place malicious files in locations that may be searched by the vulnerable component. Apply least-privilege controls, harden application and working-directory permissions, and monitor for anomalous local execution behavior associated with application startup or library loading. Because the issue is not remotely exploitable, mitigation should focus on preventing untrusted local users from interacting with affected installations until updates are applied.

Upgrade affected products to the vendor-fixed versions or later. Reported fixed versions are: COMOS V10.4.5 to V10.4.5.0.2 or later; COMOS V10.6 to V10.6.1 or later; Designcenter NX to V2512.7000 or later; Simcenter 3D to V2512.7000 or later; Simcenter Femap V2506 to V2506.0003 or later; Simcenter Femap V2512 to V2512.0002 or later; Simcenter Nastran to V2606 or later; Simcenter STAR-CCM+ to V2606 or later; Solid Edge SE2025 to V225.0 Update 13 or later; Solid Edge SE2026 to V226.0 Update 04 or later; Teamcenter Visualization V2412 to V2412.0012 or later; Teamcenter Visualization V2506 to V2506.0009 or later; Teamcenter Visualization V2512 to V2512.2605 or later; Tecnomatix Plant Simulation V2404 to V2404.0022 or later; Tecnomatix Plant Simulation V2504 to V2504.0010 or later; and Tecnomatix Process Simulate to V2606 or later. The vendor also recommends updating the IAM Client SDK to the latest available version and verifying that the untrusted search path condition has been eliminated.