CVE-2022-31465

Siemens Xpedition Designer is affected by CVE-2022-31465. The vulnerability arises from the application assigning improper access rights to the service executable, enabling an authenticated local attacker to inject arbitrary code and escalate privileges. Affected product lines include Xpedition D...

Siemens Xpedition Designer

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...