Executive brief
A vulnerability exists in the Identity and Access Management (IAM) Client SDK used across several Siemens industrial design, simulation, and lifecycle management products. These products are used by engineers and manufacturers to design complex systems, simulate fluid dynamics, and manage plant operations. An attacker who already has local access to a system could exploit this flaw to gain higher-level administrative privileges, potentially allowing them to take full control of the workstation or modify sensitive engineering data.
Technical details
An untrusted search path vulnerability (CWE-426) exists in the IAM Client SDK integrated into various Siemens products. The flaw stems from the application searching for required resources or libraries in directories that can be influenced by a local user. An authenticated attacker with local access can exploit this by placing a malicious file in the search path, leading to the execution of arbitrary code with elevated privileges. Siemens has released updates for most affected products, including COMOS, Solid Edge, and Teamcenter Visualization, to address the issue.
Affected products
- Siemens COMOS V10.4.5 < V10.4.5.0.2
- Siemens COMOS V10.6 < V10.6.1
- Siemens Designcenter NX < V2512.7000
- Siemens Simcenter 3D < V2512.7000
- Siemens Simcenter Femap V2506 < V2506.0003
- Siemens Simcenter Femap V2512 < V2512.0002
- Siemens Simcenter Nastran < V2606
- Siemens Simcenter STAR-CCM+ < V2606
- Siemens Solid Edge SE2025 < V225.0 Update 13
- Siemens Solid Edge SE2026 < V226.0 Update 04
- Siemens Teamcenter Visualization V2412 < V2412.0012
- Siemens Teamcenter Visualization V2506 < V2506.0009
- Siemens Teamcenter Visualization V2512 < V2512.2605
- Siemens Tecnomatix Plant Simulation V2404 < V2404.0022
- Siemens Tecnomatix Plant Simulation V2504 < V2504.0010
- Siemens Tecnomatix Process Simulate < V2606
Timeline
- 2026-07-14: disclosed
- 2026-07-14: patched