QID 590496

AFFECTED PRODUCTS
Siemens reports that some of the vulnerabilities affect the following UMC components.
SIMATIC STEP 7 (TIA Portal) v15: All versions prior to v15.1 update 5
SIMATIC STEP 7 (TIA Portal) v16: All versions prior to v16 Update 2
SIMOCODE ES v16: All versions prior to v16 Update 1
SIMOCODE ES v15.1: All versions prior to v15.1 Update 4
Soft Starter ES v15.1: All versions prior to v15.1 Update 3
Soft Starter ES v16: All versions prior to v16 Update 1

QID Detection Logic (Authenticated):
QID checks for the Vulnerable version of Siemens using registry "HKLM\SOFTWARE\Siemens"

Successful exploitation of these vulnerabilities could allow an attacker to cause a partial denial-of-service condition on the UMC component of the affected devices under certain circumstances. This could also allow an attacker to locally escalate privileges from a user with administrative privileges to execute code with SYSTEM level privileges.