Siemens IAM Client Vulnerability Exposes Industrial Control Systems to Privilege Escalation
A vulnerability in Siemens IAM Client allows an authenticated local attacker to perform privilege escalation. Siemens has released new versions for several affected products and recommends updating to the latest versions.
Intelligence analysis by Llama
A recently discovered vulnerability in Siemens IAM Client exposes industrial control systems to privilege escalation. Siemens has released new versions for several affected products and recommends updating to the latest versions to mitigate the risk.
Imagine you have a super powerful computer that controls important things like factories or power plants. If someone can get into the computer and make it do things it's not supposed to do, it could be very bad. This is what's happening with the Siemens IAM Client vulnerability. It allows someone to get into the computer and make it do things it's not supposed to do, which could be very bad.
Analysis
Background
A recently discovered vulnerability in Siemens IAM Client has exposed industrial control systems to privilege escalation. The vulnerability, identified as CVE-2025-40945, allows an authenticated local attacker to potentially enable escalation of privilege via local access.
Affected Products
The following Siemens products are affected by this vulnerability:
- COMOS V10.4.5 < V10.4.5.0.2
- COMOS V10.6 < V10.6.1
- Designcenter NX < V2512.7000
- Simcenter 3D < V2512.7000
- Simcenter Femap V2506 < V2506.0003
- Simcenter Femap V2512 < V2512.0002
- Simcenter Nastran < V2606
- Simcenter STAR-CCM+ < V2606
- Solid Edge SE2025 < V225.0.13.3
- Solid Edge SE2026 < V226.0.04.003
- Teamcenter Visualization V2412 < V2412.0012
- Teamcenter Visualization V2506 < V2506.0009
- Teamcenter Visualization V2512 < V2512.2605
- Tecnomatix Plant Simulation V2404 < V2404.0022
- Tecnomatix Plant Simulation V2504 < V2504.0010
- Tecnomatix Process Simulate < V2606
Remediations
Siemens has released new versions for several affected products and recommends updating to the latest versions to mitigate the risk. The following remediations are available:
- Update to V10.6.1 or later version
- Update to V225.0 Update 13 or later version
- Update to V226.0 Update 04 or later version
- Update to V2404.0022 or later version
- Update to V2412.0012 or later version
- Update to V2504.0010 or later version
- Update to V2506.0003 or later version
- Update to V2506.0009 or later version
- Update to V2512.0002 or later version
- Update to V2512.2605 or later version
- Update to V2512.7000 or later version
General Recommendations
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
Key points
- A vulnerability in Siemens IAM Client allows an authenticated local attacker to perform privilege escalation.
- Siemens has released new versions for several affected products and recommends updating to the latest versions to mitigate the risk.
- The vulnerability affects multiple Siemens products, including COMOS, Designcenter NX, Simcenter 3D, and others.
- Siemens recommends protecting network access to devices with appropriate mechanisms and configuring the environment according to Siemens' operational guidelines for Industrial Security.
Siemens has released new versions for several affected products and recommends updating to the latest versions to mitigate the risk. This should help prevent the vulnerability from being exploited and keep industrial control systems secure.
If the vulnerability is not addressed, it could potentially allow an attacker to gain elevated privileges, compromising the security of industrial control systems. This could have serious consequences, including damage to critical infrastructure and disruption of essential services.
